The branch main has been updated by emaste: URL: https://cgit.FreeBSD.org/src/commit/?id=6d46fd2cbea43002689ae1a8a0e388e9774da1bc
commit 6d46fd2cbea43002689ae1a8a0e388e9774da1bc Author: Ed Maste <ema...@freebsd.org> AuthorDate: 2025-06-05 21:22:13 +0000 Commit: Ed Maste <ema...@freebsd.org> CommitDate: 2025-06-06 02:38:27 +0000 capsicum.4: Add capsicum_helpers and libcasper references These were present in the SEE ALSO section but were not explicitly mentioned. Add a brief description of both. Reviewed by: ziaee Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D50707 --- share/man/man4/capsicum.4 | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/share/man/man4/capsicum.4 b/share/man/man4/capsicum.4 index 3c3eab5d798b..6aefae9d6df2 100644 --- a/share/man/man4/capsicum.4 +++ b/share/man/man4/capsicum.4 @@ -24,7 +24,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd January 3, 2024 +.Dd June 5, 2025 .Dt CAPSICUM 4 .Os .Sh NAME @@ -101,6 +101,20 @@ restrict access to global namespaces: Processes can only act upon their own process ID with syscalls such as .Xr cpuset_setaffinity 2 . .El +.Pp +.Fx +provides some additional functionality to support application sandboxing that +is not part of +.Nm +itself: +.Bl -tag -width indent +.It Xr capsicum_helpers 3 +A set of a inline functions which simplify modifying programs to use +.Nm . +.It Xr libcasper 3 +A library that provides services for sandboxed applications, such as operating +on files specified on a command line or establishing network connections. +.El .Sh SEE ALSO .Xr cap_enter 2 , .Xr cap_fcntls_limit 2 ,