This is an automated email from the ASF dual-hosted git repository. acassis pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/nuttx.git
commit 4c76b78e93286f27439f88d945abeccfa8a48086 Author: Royyan Zahir <[email protected]> AuthorDate: Thu Oct 1 15:12:24 2026 +0400 Documentation: describe process capabilities What each capability guards, the prctl() interface, inheritance through the task group, and where the checks sit. Signed-off-by: Royyan Zahir <[email protected]> --- Documentation/os/scheduling/capabilities.rst | 27 +++++++++++++++++++++++++++ Documentation/os/scheduling/index.rst | 1 + 2 files changed, 28 insertions(+) diff --git a/Documentation/os/scheduling/capabilities.rst b/Documentation/os/scheduling/capabilities.rst new file mode 100644 index 00000000000..23e979a8294 --- /dev/null +++ b/Documentation/os/scheduling/capabilities.rst @@ -0,0 +1,27 @@ +.. _capabilities: + +==================== +Process capabilities +==================== + +A process holds three capabilities. Without one, the calls it guards fail +with ``EPERM``. Every build, the kernel and init start with all three. +``CONFIG_SCHED_CAPABILITIES``, off with ``DEFAULT_SMALL``, builds the checks. + +================= ================================================== +``PR_CAP_RAWIO`` ``open()`` of block, MTD and BCH nodes, + ``mount()``, ``umount2()`` +``PR_CAP_SPAWN`` ``posix_spawn()``, ``task_spawn()``, + ``task_create()``, ``exec()``, ``execve()`` +``PR_CAP_ADMIN`` ``boardctl()`` reset and poweroff +================= ================================================== + +.. code-block:: c + + prctl(PR_CAPS_DROP, PR_CAP_RAWIO | PR_CAP_SPAWN); + int caps = prctl(PR_CAPS_GET); + +A drop is permanent. The set lives in the task group and a new group copies +its creator's. The checks sit in the internal functions, so kernel code +running for a process is held to that process's set. Kernel threads hold +all three. diff --git a/Documentation/os/scheduling/index.rst b/Documentation/os/scheduling/index.rst index 334870776e7..6668ff4695b 100644 --- a/Documentation/os/scheduling/index.rst +++ b/Documentation/os/scheduling/index.rst @@ -237,3 +237,4 @@ In this section wqueue.rst tls.rst user_identity.rst + capabilities.rst
