mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2025-01-21 15:45:02 +00:00
Code Issues Releases Activity

open.2: Document Capsicum behavior

Browse Source 
Document open(2) and openat(2) behavior in Capsicum capability mode.

Reviewed by:	ed (previous version), emaste, rwatson (previous version),
		wblock
Sponsored by:	Dell EMC Isilon
Differential Revision:	https://reviews.freebsd.org/D7947
This commit is contained in:
Conrad Meyer 2016-09-30 23:01:37 +00:00
parent 339e076e67
commit c038bae74c
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=306537
1 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
lib/libc/sys/open.2
View File

@ -28,7 +28,7 @@
.\" @(#)open.2 8.2 (Berkeley) 11/16/93
.\" $FreeBSD$
.\"
.Dd April 2, 2015
.Dd September 30, 2016
.Dt OPEN 2
.Os
.Sh NAME
@ -95,6 +95,28 @@ parameter, the current working directory is used
and the behavior is identical to a call to
.Fn open .
.Pp
In
.Xr capsicum 4
capability mode,
.Fn open
is not permitted.
The
.Fa path
argument to
.Fn openat
must be strictly relative to a file descriptor
.Fa fd ,
as defined in
.Pa sys/kern/vfs_lookup.c .
.Fa path
must not be an absolute path and must not contain ".." components.
Additionally, no symbolic link in
.Fa path
may contain ".." components either.
.Fa fd
must not be
.Dv AT_FDCWD .
.Pp
The flags specified are formed by
.Em or Ns 'ing
the following values
@ -447,8 +469,18 @@ nor a file descriptor associated with a directory.
.It Bq Er ENOTDIR
.Dv O_DIRECTORY
is specified and the file is not a directory.
.It Bq Er ECAPMODE
.Dv AT_FDCWD
is specified and the process is in capability mode.
.It Bq Er ECAPMODE
.Fn open
was called and the process is in capability mode.
.It Bq Er ENOTCAPABLE
.Fa path
is an absolute path or contained "..".
.El
.Sh SEE ALSO
.Xr capsicum 4 ,
.Xr chmod 2 ,
.Xr close 2 ,
.Xr dup 2 ,