diff --git a/usr.bin/ktrace/ktrace.1 b/usr.bin/ktrace/ktrace.1 --- a/usr.bin/ktrace/ktrace.1 +++ b/usr.bin/ktrace/ktrace.1 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd August 26, 2019 +.Dd April 20, 2024 .Dt KTRACE 1 .Os .Sh NAME @@ -151,6 +151,20 @@ and .Ar command options are mutually exclusive. +.Sh CAPABILITY VIOLATION TRACING +When the +.Cm p +trace point is specified, +.Nm +will record any capability violations made by the traced process. +The traced process never needs to explicitly enter capability mode for these +violations to be recorded. +.Pp +For developers that are interested in Capsicumizing their programs, the +.Cm p +flag can help identify where violations are being raised. +The number of reported violations can also be indicative of how much refactoring +will be necessary to Capsicumize the program. .Sh EXAMPLES Run "make", then trace it and any child processes: .Dl $ ktrace -i make