Lines Matching full:capability

2 // available in capability mode.  The goal is not to see if they work, just
64   EXPECT_OK(cap_enter());  // Enter capability mode.
68   // System calls that are not permitted in capability mode.
102   EXPECT_OK(cap_enter());  // Enter capability mode.
104   // System calls that are not permitted in capability mode.
118   EXPECT_OK(cap_enter());  // Enter capability mode.
178   EXPECT_OK(cap_enter());  // Enter capability mode.
189   // but they are allowed in capability mode, so errno != ECAPMODE.
213   EXPECT_OK(cap_enter());  // Enter capability mode.
215   // Creation of raw sockets is not permitted in capability mode.
228   // Interface configuration ioctls are not permitted in capability
258   EXPECT_OK(cap_enter());  // Enter capability mode.
285   EXPECT_OK(cap_enter());  // Enter capability mode.
325   EXPECT_OK(cap_enter());  // Enter capability mode.
343   EXPECT_OK(cap_enter());  // Enter capability mode.
360   EXPECT_OK(cap_enter());  // Enter capability mode.
367   EXPECT_OK(cap_enter());  // Enter capability mode.
384   EXPECT_OK(cap_enter());  // Enter capability mode.
408   EXPECT_OK(cap_enter());  // Enter capability mode
450     EXPECT_OK(cap_enter());  // Enter capability mode
512     EXPECT_OK(cap_enter());  // Enter capability mode
555   // Check that abort(3) works even in capability mode.
558     // Child: enter capability mode and call abort(3).
560     cap_enter();  // Enter capability mode.
575   EXPECT_OK(cap_enter());  // Enter capability mode.
633   // Fire off a new thread before entering capability mode
646   // Fire off a new process before entering capability mode.
647   if (verbose) fprintf(stderr, "  starting second child (non-capability mode)\n");
653     // Child: wait and then confirm this process is unaffected by capability mode in the parent.
665   EXPECT_OK(cap_enter());  // Enter capability mode.
667   // child thread that were created before entering capability mode.
668   //  - The child process is unaffected by capability mode.
669   //  - The child thread is affected by capability mode.
680   // Now that we're in capability mode, if we create a second child process
681   // it will be affected by capability mode.
682   if (verbose) fprintf(stderr, "  starting second child (in capability mode)\n");
698   // be affected by capability mode since it's per-process not per-thread.
710   // Fire off a new (second) child thread, which is also affected by capability mode.
723   if (verbose) fprintf(stderr, "  starting third child (in capability mode)\n");
763   EXPECT_OK(cap_enter());  // Enter capability mode.