KekenoBSD/src
3
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

capsicum.4: Replace 'fi' ligature and smart quotation mark

Browse Source 
While here, wrap the line to 80 characters.

Reviewed by:	jlduran
Fixes:		c54534e602 ("capsicum.4: Add some more detail from the Capsicum paper")
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D54761
This commit is contained in:
Artem Bunichev
2026-01-23 16:17:46 +00:00
committed by Jose Luis Duran
parent 6b9cbeed64
commit e6bafbeb1e
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
share/man/man4/capsicum.4
+5 -5
View File
@@ -24,7 +24,7 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE. .\" SUCH DAMAGE.
.\" .\"
.Dd June 17, 2025 .Dd January 23, 2026
.Dt CAPSICUM 4 .Dt CAPSICUM 4
.Os .Os
.Sh NAME .Sh NAME
@@ -39,7 +39,7 @@ is a lightweight OS capability and sandbox framework implementing a hybrid
capability system model. capability system model.
.Nm .Nm
is designed to blend capabilities with UNIX. is designed to blend capabilities with UNIX.
This approach achieves many of the benefits of least-privilege operation, while This approach achieves many of the benefits of least-privilege operation, while
preserving existing UNIX APIs and performance, and presents application authors preserving existing UNIX APIs and performance, and presents application authors
with an adoption path for capability-oriented design. with an adoption path for capability-oriented design.
.Pp .Pp
@@ -72,10 +72,10 @@ constrained.
For instance, For instance,
.Xr sysctl 2 .Xr sysctl 2
can be used to query process-local information such as address space layout, can be used to query process-local information such as address space layout,
but also to monitor a system’s network connections. but also to monitor a system's network connections.
.Xr sysctl 2 .Xr sysctl 2
is constrained by explicitly marking \(~~60 of over 15000 parameters as permitted is constrained by explicitly marking \(~~60 of over 15000 parameters as
in capability mode; all others are denied. permitted in capability mode; all others are denied.
.Pp .Pp
The system calls which require constraints are The system calls which require constraints are
.Xr sysctl 2 , .Xr sysctl 2 ,