MFC r340130, r340134:r340130: (by oshogbo)libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limitThe idea behind those functions is not to force consumers to remember that thereis a need to c
MFC r340130, r340134:r340130: (by oshogbo)libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limitThe idea behind those functions is not to force consumers to remember that thereis a need to check errno on failure. We already have a caph_enter(3) functionwhich does the same for cap_enter(2).r340134: (by oshogbo)Fix a recusive call introduce in the r340130.
show more ...
Fix description.
Fix declaration.
With r335636 C++ program use libcasper.h and capsicum_helpers.h.Add __BEGIN_DECLS and __END_DECLS to those headers.
libcapsicum: adding missing man page links
Introduce caph_enter and caph_enter_casper.The caph_enter function should made it easier to sandbox applicationand not force us to remember that we need to check errno on failure.Another function
Introduce caph_enter and caph_enter_casper.The caph_enter function should made it easier to sandbox applicationand not force us to remember that we need to check errno on failure.Another function is also checking if casper is present.Reviewed by: emaste, cem (partially)Differential Revision: https://reviews.freebsd.org/D14557
capsicum_helpers: Add EVENT to default stdio rights setWithout it, calling caph_limit_stdio(3) breaks Irssi.Reviewed by: oshogboMFC after: 2 weeksSponsored by: DARPA, AFRLDifferential Revision
capsicum_helpers: Add EVENT to default stdio rights setWithout it, calling caph_limit_stdio(3) breaks Irssi.Reviewed by: oshogboMFC after: 2 weeksSponsored by: DARPA, AFRLDifferential Revision: https://reviews.freebsd.org/D12622
capsicum_helpers: Add SEEK to default stdio rights setPR: 219173Sponsored by: Dell EMC Isilon
capsicum_helpers: Add FIODTYPE to default ioctls allowedFIODTYPE will be needed by hexdump(1) to speed up the -s flag on devicesthat should be able to support fseek(3); specifically, in an attempt
capsicum_helpers: Add FIODTYPE to default ioctls allowedFIODTYPE will be needed by hexdump(1) to speed up the -s flag on devicesthat should be able to support fseek(3); specifically, in an attempt tocorrect for the fact that most tape drives don't support seeking yet don'tindicate as such when fseeko(3) is invoked. Related: D10939Reviewed by: cem, emaste, oshogboApproved by: emaste (mentor)Differential Revision: https://reviews.freebsd.org/D10937
capsicum_helpers: Add LOOKUP flagAdd a helper routine for opening a directory that is restricted to beingused for opening relative files as stdio streams.I think this will really help basic adap
capsicum_helpers: Add LOOKUP flagAdd a helper routine for opening a directory that is restricted to beingused for opening relative files as stdio streams.I think this will really help basic adaptation of multi-file programs toCapsicum. Rather than having each program initialize a rights object andioctl/fcntl arrays for their root fd for relative opens, consolidate in thelogical place.Reviewed by: oshogbo@Sponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D8743
capsicum_helpers: Squash errors from closed fdsSquash EBADF from closed stdin, stdout, or stderr in caph_limit_stdio().Any program used during special shell scripts may commonly be forkedfrom a p
capsicum_helpers: Squash errors from closed fdsSquash EBADF from closed stdin, stdout, or stderr in caph_limit_stdio().Any program used during special shell scripts may commonly be forkedfrom a parent process with closed standard stream. Do the common sensething for this common use.Reported by: Iblis Lin <iblis AT hs.ntnu.edu.tw>Reviewed by: oshogbo@ (earlier version)Sponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D8657
DIRDEPS_BUILD: Connect new dependencies.MFC after: 2 weeksSponsored by: Dell EMC Isilon
Fix few sentence in the man page.Pointed out by: wblock
Add man pages for Capsicum helpers.Reviewed by: cemDifferential Revision: https://reviews.freebsd.org/D8154
libcapsicum: limit stderrDon't limit stdout twice, instead limit stderr.Pointed out by: rpokala@
libcapsicum: introduce Capsicum helpersCapsicum helpers are a set of inline functions which goal is to reduceduplicated patterns used to Capsicumize applications.Reviewed by: cem, AllanJude, bap
libcapsicum: introduce Capsicum helpersCapsicum helpers are a set of inline functions which goal is to reduceduplicated patterns used to Capsicumize applications.Reviewed by: cem, AllanJude, bapt, ed, emasteDifferential Revision: https://reviews.freebsd.org/D8013
Remove lib/libcapsicum and libexec/casper, brought back aspart of a merge mishap.Reported by: junovitchSponsored by: The FreeBSD Foundation
First pass through library packaging.Sponsored by: The FreeBSD Foundation
META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.This both avoids some dependencies on xinstall.host and allowsbootstrapping on older releases to work due to lack of
META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.This both avoids some dependencies on xinstall.host and allowsbootstrapping on older releases to work due to lack of at least 'install -l'support.Sponsored by: EMC / Isilon Storage Division
Let the nv.h and dnv.h includes be only in sys directory.Change consumers to include those files from sys.Add duplicated files to ObsoleteFiles.Approved by: pjd (mentor)
Revert r284417 it is not necessary anymore
Enforce overwritting SHLIBDIRSince METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loadingbsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere.This ma
Enforce overwritting SHLIBDIRSince METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loadingbsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere.This makes /lib being populated again.Reported by: many
Fix typo when deregistering the VLAN unconfig event handlerSubmitted by: Masao Uebayashi <[email protected]>MFC after: 3 days
dirdeps.mk now sets DEP_RELDIR
Fix a lock up where we enter swapper() with interrupts disabled.In smp_rendezvous_cpus we expect to wait for all cpus to entersmp_rendezvous_action. If we call this holding a proc lock swapper may
Fix a lock up where we enter swapper() with interrupts disabled.In smp_rendezvous_cpus we expect to wait for all cpus to entersmp_rendezvous_action. If we call this holding a proc lock swapper mayattempt to also lock it, however as interrupts are disabled the cpu neverhandles the ipi. Because smp_rendezvous_action waits for all signaledcpus before contining it may get caught waiting for the cpu running swapperas the proc mutex will be unlocked after smp_rendezvous_cpus finishes.The fix is to enable interrupts in the configure stage as we should bedoing.MFC after: 1 week
12