diff options
| author | Ed Maste <emaste@FreeBSD.org> | 2026-05-20 20:27:49 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2026-05-20 20:49:22 +0000 |
| commit | 59601a75d6fb1300b1aec2977eaa6adeb0300684 (patch) | |
| tree | fab78a242e93f1468036064c0979e1ff7bd2a8cc | |
| parent | 2afb4c979f2d1befc3e259a0a7359a8e31a48e55 (diff) | |
cap_net.3: Clarify monotonic reduction in permitted operations
Reviewed by: markj, oshogbo
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57141
| -rw-r--r-- | lib/libcasper/services/cap_net/cap_net.3 | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/libcasper/services/cap_net/cap_net.3 b/lib/libcasper/services/cap_net/cap_net.3 index ae9a6d820ae3..10d8c8b3f1f6 100644 --- a/lib/libcasper/services/cap_net/cap_net.3 +++ b/lib/libcasper/services/cap_net/cap_net.3 @@ -203,7 +203,8 @@ will consume and apply the limits. .Pp Once a set of limits is applied, subsequent calls to .Fn cap_net_limit -will fail unless the new set is a subset of the current set. +may only further restrict the service. +Any call that would grant operations not currently permitted will fail. .Pp If the .Fn cap_net_limit |