2 .\" Copyright (c) 2000 Robert N. M. Watson
3 .\" All rights reserved.
5 .\" Redistribution and use in source and binary forms, with or without
6 .\" modification, are permitted provided that the following conditions
8 .\" 1. Redistributions of source code must retain the above copyright
9 .\" notice, this list of conditions and the following disclaimer.
10 .\" 2. Redistributions in binary form must reproduce the above copyright
11 .\" notice, this list of conditions and the following disclaimer in the
12 .\" documentation and/or other materials provided with the distribution.
14 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 .\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28 .\" TrustedBSD Project - support for POSIX.1e process capabilities
35 .Nd Set the Process Capability State
37 .Fd #include <sys/types.h>
38 .Fd #include <sys/capability.h>
40 .Fn cap_set_proc "cap_t cap_p"
44 shall set the values for all capability flags for all capabilities defined
45 in the implementation with the capability state identified by
47 The new capability state of the process shall be completely determined by
50 upon successful return from this function.
53 is set for any capability not currently permitted for the calling process,
54 the function shall fail, and the capability state of the process shall
56 .Sh IMPLEMENTATION NOTES
57 FreeBSD's support for POSIX.1e interfaces and features is still under
58 development at this time.
60 Upon successful completion, this function shall return a value of zero.
61 Otherwise, a value of -1 shall be returned and
63 shall be set to indicate the error.
64 Neither the state represented in the object identified by
66 nor the capability state of the calling process shall be affected if the
69 If any of the following conditions occur, the
71 function shall return -1 and set
73 to the corresponding value:
78 argument does not refer to a capability state in working storage.
80 The caller attempted to set a capability flag of a capability that was not
81 permitted to the invoking process.
83 This function requires more memory than is allowed by the hardware or
84 system-imposed memory management constraints.
91 POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion
92 of the draft continues on the cross-platform POSIX.1e implementation
93 mailing list. To join this list, see the
95 POSIX.1e implementation
96 page for more information.
98 Support for POSIX.1e Capabilities was developed as part of the TrustedBSD
100 POSIX.1e Capability support was introduced in
102 and development continues.
104 .An Robert N M Watson
106 These features are not yet fully implemented.