law execve_effective_within_permitted

bend-osdev-caps@0.1.0.0 · LAWS.bend:33

import Base
import bend-osdev-caps@0.1.0.0/caps.bend as C
import bend-osdev-caps@0.1.0.0/exec.bend as E

33law execve_effective_within_permitted:
34  for +k: C.CapsKernel
35  for +c: C.CapCred
36  for +f: C.CapFile
37  for +ign: Bool
38  {C.CapSet.subset(C.CapState.effective(E.Caps.execve.sets(k, c, f, ign)), C.CapState.permitted(E.Caps.execve.sets(k, c, f, ign))) == True{} : Bool}