law execve_ambient_within_permitted

bend-osdev-caps@0.1.0.0 · LAWS.bend:40

import Base
import bend-osdev-caps@0.1.0.0/caps.bend as C
import bend-osdev-caps@0.1.0.0/exec.bend as E

40law execve_ambient_within_permitted:
41  for +k: C.CapsKernel
42  for +c: C.CapCred
43  for +f: C.CapFile
44  for +ign: Bool
45  {C.CapSet.subset(C.CapState.ambient(E.Caps.execve.sets(k, c, f, ign)), C.CapState.permitted(E.Caps.execve.sets(k, c, f, ign))) == True{} : Bool}