cap_sandboxed(3)

cap_sandboxed3

Check if in a capability mode sandbox

Usage

#include <sys/capsicum.h>

#include <stdbool.h>

bool

cap_sandboxed(void);

Library

Standard C Library (libc, -lc)

Overview

cap_sandboxed() returns true if the process is in a capability mode sandbox or false if it is not. This function is a more handy alternative to the cap_getmode(2) system call as it always succeeds, so there is no need for error checking. If the support for capability mode is not compiled into the kernel, cap_sandboxed() will always return false.

Return values

Function cap_sandboxed() is always successful and will return either true or false.

Releases

30 releases since FreeBSD 10.0-RELEASE; the text changed 16 times.

  1. 10.0
  2. 10.1
  3. 10.2
  4. 10.3
  5. 10.4
  6. 11.0
  7. 11.1
  8. 11.2
  9. 11.3
  10. 11.4
  11. 12.0
  12. 12.1
  13. 12.2
  14. 12.3
  15. 12.4
  16. 13.0–13.2
  17. 13.3–16.0

History

The cap_sandboxed() function first appeared in FreeBSD 9.2.

Authors

This function was implemented and manual page was written by Pawel Jakub Dawidek ⟨[email protected]⟩ under sponsorship of the FreeBSD Foundation.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.