git: f58fb8abc465 - stable/14 - capsicum.4: Add capsicum_helpers and libcasper references
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 22 Jul 2025 20:30:58 UTC
The branch stable/14 has been updated by emaste: URL: https://cgit.FreeBSD.org/src/commit/?id=f58fb8abc465303ec756b15ef1c8f0e75a33067b commit f58fb8abc465303ec756b15ef1c8f0e75a33067b Author: Ed Maste <emaste@FreeBSD.org> AuthorDate: 2025-06-05 21:22:13 +0000 Commit: Ed Maste <emaste@FreeBSD.org> CommitDate: 2025-07-22 20:30:30 +0000 capsicum.4: Add capsicum_helpers and libcasper references These were present in the SEE ALSO section but were not explicitly mentioned. Add a brief description of both. Reviewed by: ziaee Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D50707 (cherry picked from commit 6d46fd2cbea43002689ae1a8a0e388e9774da1bc) --- share/man/man4/capsicum.4 | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/share/man/man4/capsicum.4 b/share/man/man4/capsicum.4 index 3c3eab5d798b..6aefae9d6df2 100644 --- a/share/man/man4/capsicum.4 +++ b/share/man/man4/capsicum.4 @@ -24,7 +24,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd January 3, 2024 +.Dd June 5, 2025 .Dt CAPSICUM 4 .Os .Sh NAME @@ -101,6 +101,20 @@ restrict access to global namespaces: Processes can only act upon their own process ID with syscalls such as .Xr cpuset_setaffinity 2 . .El +.Pp +.Fx +provides some additional functionality to support application sandboxing that +is not part of +.Nm +itself: +.Bl -tag -width indent +.It Xr capsicum_helpers 3 +A set of a inline functions which simplify modifying programs to use +.Nm . +.It Xr libcasper 3 +A library that provides services for sandboxed applications, such as operating +on files specified on a command line or establishing network connections. +.El .Sh SEE ALSO .Xr cap_enter 2 , .Xr cap_fcntls_limit 2 ,