2 // available in capability mode.  The goal is not to see if they work, just
64   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
68   // System calls that are not permitted in capability mode.  in FORK_TEST_F()
102   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
104   // System calls that are not permitted in capability mode.  in FORK_TEST_F()
118   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
178   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
189   // but they are allowed in capability mode, so errno != ECAPMODE.  in FORK_TEST_F()
213   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
215   // Creation of raw sockets is not permitted in capability mode.  in FORK_TEST_F()
228   // Interface configuration ioctls are not permitted in capability  in FORK_TEST_F()
258   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
285   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
325   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
343   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
360   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
367   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
384   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
408   EXPECT_OK(cap_enter());  // Enter capability mode  in FORK_TEST()
450     EXPECT_OK(cap_enter());  // Enter capability mode  in TEST()
512     EXPECT_OK(cap_enter());  // Enter capability mode  in TEST()
555   // Check that abort(3) works even in capability mode.  in TEST()
558     // Child: enter capability mode and call abort(3).  in TEST()
560     cap_enter();  // Enter capability mode.  in TEST()
575   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
633   // Fire off a new thread before entering capability mode  in FORK_TEST()
646   // Fire off a new process before entering capability mode.  in FORK_TEST()
647   if (verbose) fprintf(stderr, "  starting second child (non-capability mode)\n");  in FORK_TEST()
653     // Child: wait and then confirm this process is unaffected by capability mode in the parent.  in FORK_TEST()
665   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
667   // child thread that were created before entering capability mode.  in FORK_TEST()
668   //  - The child process is unaffected by capability mode.  in FORK_TEST()
669   //  - The child thread is affected by capability mode.  in FORK_TEST()
680   // Now that we're in capability mode, if we create a second child process  in FORK_TEST()
681   // it will be affected by capability mode.  in FORK_TEST()
682   if (verbose) fprintf(stderr, "  starting second child (in capability mode)\n");  in FORK_TEST()
698   // be affected by capability mode since it's per-process not per-thread.  in FORK_TEST()
710   // Fire off a new (second) child thread, which is also affected by capability mode.  in FORK_TEST()
723   if (verbose) fprintf(stderr, "  starting third child (in capability mode)\n");  in FORK_TEST()
763   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()