NAME
cap_sandboxed – Check if in a capability mode sandbox
LIBRARY
Standard C Library (libc, -lc)
SYNOPSIS
#include <sys/capsicum.h>
#include <stdbool.h>
bool
cap_sandboxed(void);
DESCRIPTION
cap_sandboxed() returns true if the process is in a capability mode sandbox or false if it is not. This function is a more handy alternative to the cap_getmode(2) system call as it always succeeds, so there is no need for error checking. If the support for capability mode is not compiled into the kernel, cap_sandboxed() will always return false.
RETURN VALUES
Function cap_sandboxed() is always successful and will return either true or false.
SEE ALSO
HISTORY
The cap_sandboxed() function first appeared in FreeBSD 9.2.
AUTHORS
This function was implemented and manual page was written by Pawel Jakub Dawidek ⟨[email protected]⟩ under sponsorship of the FreeBSD Foundation.