dlopen(3): mention fdlopen for capsicum(4)

Capsicum-sandboxed applications generally cannot use dlopen, as absolute
and cwd-relative paths cannot be accessed.  Mention that fdlopen is
useful for sandboxed applications.

PR:		277169
Reviewed by:	markj, oshogbo
Sponsored by:	The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D45108

(cherry picked from commit d84fd89ecd)
This commit is contained in:
Ed Maste 2024-05-06 21:45:50 -04:00
parent ddabe1d3c5
commit f2109683ce

View file

@ -29,9 +29,7 @@
.\" .\"
.\" Copyright (c) 1991 Sun Microsystems, Inc. .\" Copyright (c) 1991 Sun Microsystems, Inc.
.\" .\"
.\" @(#) dlopen.3 1.6 90/01/31 SMI .Dd May 7, 2024
.\"
.Dd May 14, 2020
.Dt DLOPEN 3 .Dt DLOPEN 3
.Os .Os
.Sh NAME .Sh NAME
@ -201,6 +199,10 @@ The
function can be used by the code that needs to perform function can be used by the code that needs to perform
additional checks on the loaded objects, to prevent races with additional checks on the loaded objects, to prevent races with
symlinking or renames. symlinking or renames.
Applications sandboxed using
.Xr capsicum 4
can also make beneficial use of
.Fn fdlopen .
.Pp .Pp
The The
.Fn dlsym .Fn dlsym