1 .\" Copyright (c) 2013 The FreeBSD Foundation
2 .\" All rights reserved.
4 .\" This documentation was written by Pawel Jakub Dawidek under sponsorship
5 .\" from the FreeBSD Foundation.
7 .\" Redistribution and use in source and binary forms, with or without
8 .\" modification, are permitted provided that the following conditions
10 .\" 1. Redistributions of source code must retain the above copyright
11 .\" notice, this list of conditions and the following disclaimer.
12 .\" 2. Redistributions in binary form must reproduce the above copyright
13 .\" notice, this list of conditions and the following disclaimer in the
14 .\" documentation and/or other materials provided with the distribution.
16 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
17 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 .\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
20 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 .Nd "Capability Services friendly daemon"
38 [-Fhv] [-D servconfdir] [-P pidfile] [-S sockpath]
40 .Op Fl D Ar servconfdir
46 daemon hosts various services that can be accessed through
47 libcapsicum's capabilities by programs running in sandboxes.
48 For example it is prohibited to send UDP packets to arbitrary destinations
49 when operating in capability mode, which makes DNS resolution impossible.
50 To make it possible the
54 service that proxies DNS resolution requests through a dedicated,
55 non-sandboxed process provided by
60 daemon can be started with the following command line arguments:
61 .Bl -tag -width ".Fl D Ar servconfdir"
62 .It Fl D Ar servconfdir
63 Specify alternative location of the service configuration directory.
64 The default location is
69 daemon in the foreground.
72 starts in the background.
78 Specify alternative location of a file where main process PID will be
80 The default location is
81 .Pa /var/run/casperd.pid .
83 Specify alternative location of the
85 domain socket used to connect to the
88 The default location is
91 Print or log verbose/debugging information.
92 This option can be specified multiple times to raise the verbosity
96 .Bl -tag -width ".Pa /var/run/casperd.pid" -compact
98 The configuration directory for
101 .It Pa /var/run/casper
103 domain socket used to connect to the
106 .It Pa /var/run/casperd.pid
107 The default location of the
114 daemon exits 0 on success, and >0 if an error occurs.
125 .An Pawel Jakub Dawidek Aq pawel@dawidek.net
126 under sponsorship from the FreeBSD Foundation.