2 .\" Copyright (c) 2012 The FreeBSD Foundation
3 .\" All rights reserved.
5 .\" This documentation was written by Pawel Jakub Dawidek under sponsorship
6 .\" the FreeBSD Foundation.
8 .\" Redistribution and use in source and binary forms, with or without
9 .\" modification, are permitted provided that the following conditions
11 .\" 1. Redistributions of source code must retain the above copyright
12 .\" notice, this list of conditions and the following disclaimer.
13 .\" 2. Redistributions in binary form must reproduce the above copyright
14 .\" notice, this list of conditions and the following disclaimer in the
15 .\" documentation and/or other materials provided with the distribution.
17 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 .\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
21 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 .Dt CAP_IOCTLS_LIMIT 2
35 .Nm cap_ioctls_limit ,
37 .Nd manage allowed ioctl commands
43 .Fn cap_ioctls_limit "int fd" "const unsigned long *cmds" "size_t ncmds"
45 .Fn cap_ioctls_get "int fd" "unsigned long *cmds" "size_t maxcmds"
47 If a file descriptor is granted the
49 capability right, the list of allowed
51 commands can be selectively reduced (but never expanded) with the
56 argument is an array of
60 argument specifies the number of elements in the array.
63 elements in the array.
64 Including an element that has been previously revoked will generate an error.
65 After a successful call only those listed in the array may be used.
67 The list of allowed ioctl commands for a given file descriptor can be obtained
73 argument points at memory that can hold up to
76 The function populates the provided buffer with up to
78 elements, but always returns the total number of ioctl commands allowed for the
79 given file descriptor.
80 The total number of ioctls commands for the given file descriptor can be
89 If all ioctl commands are allowed
91 capability right is assigned to the file descriptor and the
93 system call was never called for this file descriptor), the
95 system call will return
97 and will not modify the buffer pointed to by the
101 .Rv -std cap_ioctls_limit
105 function, if successful, returns the total number of allowed ioctl commands or
108 if all ioctls commands are allowed.
111 is returned and the global variable errno is set to indicate the error.
119 argument is not a valid descriptor.
123 argument points at an invalid address.
127 argument is greater than
129 .It Bq Er ENOTCAPABLE
131 would expand the list of allowed
142 argument is not a valid descriptor.
146 argument points at invalid address.
149 .Xr cap_fcntls_limit 2 ,
150 .Xr cap_rights_limit 2 ,
157 system calls first appeared in
159 Support for capabilities and capabilities mode was developed as part of the
163 This function was created by
164 .An Pawel Jakub Dawidek Aq Mt pawel@dawidek.net
165 under sponsorship of the FreeBSD Foundation.