git: d84fd89ecd40 - main - dlopen(3): mention fdlopen for capsicum(4)

From: Ed Maste <emaste_at_FreeBSD.org>
Date: Tue, 07 May 2024 13:10:06 UTC
The branch main has been updated by emaste:

URL: https://cgit.FreeBSD.org/src/commit/?id=d84fd89ecd404ffbf629381d2dde14fd79b39402

commit d84fd89ecd404ffbf629381d2dde14fd79b39402
Author:     Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2024-05-07 01:45:50 +0000
Commit:     Ed Maste <emaste@FreeBSD.org>
CommitDate: 2024-05-07 13:09:59 +0000

    dlopen(3): mention fdlopen for capsicum(4)
    
    Capsicum-sandboxed applications generally cannot use dlopen, as absolute
    and cwd-relative paths cannot be accessed.  Mention that fdlopen is
    useful for sandboxed applications.
    
    PR:             277169
    Reviewed by:    markj, oshogbo
    Sponsored by:   The FreeBSD Foundation
    Differential Revision: https://reviews.freebsd.org/D45108
---
 lib/libc/gen/dlopen.3 | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/lib/libc/gen/dlopen.3 b/lib/libc/gen/dlopen.3
index 9871029a84b5..340545114114 100644
--- a/lib/libc/gen/dlopen.3
+++ b/lib/libc/gen/dlopen.3
@@ -29,7 +29,7 @@
 .\"
 .\" Copyright (c) 1991 Sun Microsystems, Inc.
 .\"
-.Dd May 14, 2020
+.Dd May 7, 2024
 .Dt DLOPEN 3
 .Os
 .Sh NAME
@@ -199,6 +199,10 @@ The
 function can be used by the code that needs to perform
 additional checks on the loaded objects, to prevent races with
 symlinking or renames.
+Applications sandboxed using
+.Xr capsicum 4
+can also make beneficial use of
+.Fn fdlopen .
 .Pp
 The
 .Fn dlsym