Skip to content

Commit

Permalink
dlopen(3): mention fdlopen for capsicum(4)
Browse files Browse the repository at this point in the history
Capsicum-sandboxed applications generally cannot use dlopen, as absolute
and cwd-relative paths cannot be accessed.  Mention that fdlopen is
useful for sandboxed applications.

PR:		277169
Reviewed by:	markj, oshogbo
Sponsored by:	The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D45108
  • Loading branch information
emaste committed May 7, 2024
1 parent d3831ca commit d84fd89
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion lib/libc/gen/dlopen.3
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
.\"
.\" Copyright (c) 1991 Sun Microsystems, Inc.
.\"
.Dd May 14, 2020
.Dd May 7, 2024
.Dt DLOPEN 3
.Os
.Sh NAME
Expand Down Expand Up @@ -199,6 +199,10 @@ The
function can be used by the code that needs to perform
additional checks on the loaded objects, to prevent races with
symlinking or renames.
Applications sandboxed using
.Xr capsicum 4
can also make beneficial use of
.Fn fdlopen .
.Pp
The
.Fn dlsym
Expand Down

0 comments on commit d84fd89

Please sign in to comment.