2 // available in capability mode.  The goal is not to see if they work, just
62   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
66   // System calls that are not permitted in capability mode.  in FORK_TEST_F()
94   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
96   // System calls that are not permitted in capability mode.  in FORK_TEST_F()
110   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
154   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
165   // but they are allowed in capability mode, so errno != ECAPMODE.  in FORK_TEST_F()
189   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
191   // Creation of raw sockets is not permitted in capability mode.  in FORK_TEST_F()
204   // Interface configuration ioctls are not permitted in capability  in FORK_TEST_F()
234   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
261   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
292   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
310   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
327   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
334   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
351   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
375   EXPECT_OK(cap_enter());  // Enter capability mode  in FORK_TEST()
409     EXPECT_OK(cap_enter());  // Enter capability mode  in TEST()
471     EXPECT_OK(cap_enter());  // Enter capability mode  in TEST()
514   // Check that abort(3) works even in capability mode.  in TEST()
517     // Child: enter capability mode and call abort(3).  in TEST()
519     cap_enter();  // Enter capability mode.  in TEST()
534   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST_F()
590   // Fire off a new thread before entering capability mode  in FORK_TEST()
603   // Fire off a new process before entering capability mode.  in FORK_TEST()
604   if (verbose) fprintf(stderr, "  starting second child (non-capability mode)\n");  in FORK_TEST()
610     // Child: wait and then confirm this process is unaffected by capability mode in the parent.  in FORK_TEST()
622   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()
624   // child thread that were created before entering capability mode.  in FORK_TEST()
625   //  - The child process is unaffected by capability mode.  in FORK_TEST()
626   //  - The child thread is affected by capability mode.  in FORK_TEST()
637   // Now that we're in capability mode, if we create a second child process  in FORK_TEST()
638   // it will be affected by capability mode.  in FORK_TEST()
639   if (verbose) fprintf(stderr, "  starting second child (in capability mode)\n");  in FORK_TEST()
655   // be affected by capability mode since it's per-process not per-thread.  in FORK_TEST()
667   // Fire off a new (second) child thread, which is also affected by capability mode.  in FORK_TEST()
680   if (verbose) fprintf(stderr, "  starting third child (in capability mode)\n");  in FORK_TEST()
720   EXPECT_OK(cap_enter());  // Enter capability mode.  in FORK_TEST()