2 Commits

Author	SHA1	Message	Date
Robert Watson	b881b8be1d	Update most userspace consumers of capability.h to use capsicum.h instead. ... auditdistd is not updated as I will make the change upstream and then do a vendor import sometime in the next week or two. MFC after: 3 weeks	2014-03-16 11:04:44 +00:00
Pawel Jakub Dawidek	d6f122f4fb	Provide cap_sandboxed(3) function, which is a wrapper around cap_getmode(2) ... system call, which has a nice property - it never fails, so it is a bit easier to use. If there is no support for capability mode in the kernel the function will return false (not in a sandbox). If the kernel is compiled with the support for capability mode, the function will return true or false depending if the calling process is in the capability mode sandbox or not respectively. Sponsored by: The FreeBSD Foundation	2013-03-02 00:11:27 +00:00