CAP_SANDBOXED(3)

hey bestie, welcome to CAP_SANDBOXED(3) — the Library Functions Manual page that makes sandbox checking feel effortless 💅

✨ NAME ✨

cap_sandboxed — check if you're in a capability mode sandbox 🧚

📚 LIBRARY 📚

Standard C Library (libc, -lc) 💖

🎀 SYNOPSIS 🎀

#include <sys/capsicum.h>
#include <stdbool.h>

bool
cap_sandboxed(void);

🌸 DESCRIPTION 🌸

okay so cap_sandboxed() is literally the vibe check. It returns true if the process is in a capability mode sandbox, or false if it is not. 🦋

It's a more handy alternative to the cap_getmode(2) system call because it always succeeds — so there is no need for error checking, bestie. None. Zero. Not me worrying about return codes. 🙈

If the support for capability mode is not compiled into the kernel, cap_sandboxed() will always return false. Periodt. ⭐

🫶 RETURN VALUES 🫶

Function cap_sandboxed() is always successful and will return either true or false. Slay. That's the whole section, no jump scare. 💀

👀 SEE ALSO 👀

• cap_enter(2)
• capsicum(4)

🕰️ HISTORY 🕰️

The cap_sandboxed() function first appeared in FreeBSD 9.2. iconic behavior honestly 👑

🖋️ AUTHORS 🖋️

This function was implemented and manual page was written by Pawel Jakub Dawidek <pawel@dawidek.net> under sponsorship of the FreeBSD Foundation. 💜

---

💖 and that's the page, bestie 💖 — from the Debian edition, dated May 5, 2020. Now go be the main character of your own sandbox 🫶