Capsicumize file(1)

[shubh]

Summary

Used the cap_fileargs to open the files in capability mode.

file <multiple argument of files>

works in capability mode

This patch has a limitation:

• file -f a.txt where a.txt has a list of files, doesn't work in capability mode

Test Plan

ktrace file a.txt
kdump | grep cap

[delphij]

Please be sure to talk with upstream (Christos) before making changes.

[oshogbo]

contrib/file/src/file.c

181

style.

429

I'm not sure if I'm fun of this.
Why we have two diffrent place to enter capability mode?
We can't enter one time like seccomp above?