Update manpage for pledge()

Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/doc/priv_wrapper.1 b/doc/priv_wrapper.1
index 0846912bcd9fd1e22f40176c1561b182a947c3ac..46ba3898fbcb434a57ea88fe41faf0763ba8d2da 100644 (file)
--- a/doc/priv_wrapper.1
+++ b/doc/priv_wrapper.1
@@ -2,12 +2,12 @@
 .\"     Title: priv_wrapper
 .\"    Author: Samba Team
 .\" Generator: Asciidoctor 2.0.17
-.\"      Date: 2022-09-12
+.\"      Date: 2022-09-14
 .\"    Manual: \ \&
 .\"    Source: \ \&
 .\"  Language: English
 .\"
-.TH "PRIV_WRAPPER" "1" "2022-09-12" "\ \&" "\ \&"
+.TH "PRIV_WRAPPER" "1" "2022-09-14" "\ \&" "\ \&"
 .ie \n(.g .ds Aq \(aq
 .el       .ds Aq '
 .ss \n[.ss] 0
@@ -36,8 +36,9 @@ LD_PRELOAD=libpriv_wrapper.so PRIV_WRAPPER=1 [PRIV_WRAPPER_CHROOT_DISABLE=1] [PR
 .sp
 priv_wrapper aims to help running processes which are dropping privileges or are
 restricting resources in test environments.
-It can disable chroot, prctl and setrlmit system calls. A disabled call always
+It can disable chroot, prctl, pledge and setrlmit system calls. A disabled call always
 succeeds (i.e. returns 0) and does nothing.
+The system call pledge exists only on OpenBSD.
 .SH "ENVIRONMENT VARIABLES"
 .sp
 \fBPRIV_WRAPPER\fP
@@ -97,6 +98,11 @@ RLIMIT_RTPRIO
 RLIMIT_RTTIME
 RLIMIT_NLIMITS
 .sp
+\fBPRIV_WRAPPER_PLEDGE_DISABLE\fP
+.RS 4
+If this is set to \fI1\fP then pledge() system call will be disabled.
+.RE
+.sp
 \fBPRIV_WRAPPER_DEBUGLEVEL\fP
 .RS 4
 If you need to see what is going on in priv_wrapper itself or try to find a

diff --git a/doc/priv_wrapper.1.txt b/doc/priv_wrapper.1.txt
index 3a4f376041bf94973836da6f77ece2b8a126ff82..b13a92079274d1d665d9c37190255d9e6eb95d95 100644 (file)
--- a/doc/priv_wrapper.1.txt
+++ b/doc/priv_wrapper.1.txt
@@ -18,8 +18,9 @@ DESCRIPTION
 
 priv_wrapper aims to help running processes which are dropping privileges or are
 restricting resources in test environments.
-It can disable chroot, prctl and setrlmit system calls. A disabled call always
+It can disable chroot, prctl, pledge and setrlmit system calls. A disabled call always
 succeeds (i.e. returns 0) and does nothing.
+The system call pledge exists only on OpenBSD.
 
 ENVIRONMENT VARIABLES
 ---------------------
@@ -76,6 +77,10 @@ RLIMIT_RTPRIO
 RLIMIT_RTTIME
 RLIMIT_NLIMITS
 
+*PRIV_WRAPPER_PLEDGE_DISABLE*::
+
+If this is set to '1' then pledge() system call will be disabled.
+
 *PRIV_WRAPPER_DEBUGLEVEL*::
 
 If you need to see what is going on in priv_wrapper itself or try to find a