|
Revision tags: release/12.2.0, release/11.4.0, release/12.1.0, release/11.3.0 |
|
| #
b894196f |
| 26-Jun-2019 |
Ian Lepore <[email protected]> |
MFC r340130, r340134:
r340130: (by oshogbo)
libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limit
The idea behind those functions is not to force consumers to remember that there
is a need to c
MFC r340130, r340134:
r340130: (by oshogbo)
libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limit
The idea behind those functions is not to force consumers to remember that there
is a need to check errno on failure. We already have a caph_enter(3) function
which does the same for cap_enter(2).
r340134: (by oshogbo)
Fix a recusive call introduce in the r340130.
show more ...
|
|
Revision tags: release/12.0.0, release/11.2.0 |
|
| #
8a3255c2 |
| 18-Jun-2018 |
Eitan Adler <[email protected]> |
libcapsicum: adding missing man page links
|
|
Revision tags: release/10.4.0, release/11.1.0 |
|
| #
c3eed03d |
| 05-Oct-2016 |
Mariusz Zaborski <[email protected]> |
Add man pages for Capsicum helpers.
Reviewed by: cem
Differential Revision: https://reviews.freebsd.org/D8154
|
| #
7a6e3cf8 |
| 03-Oct-2016 |
Mariusz Zaborski <[email protected]> |
libcapsicum: introduce Capsicum helpers
Capsicum helpers are a set of inline functions which goal is to reduce
duplicated patterns used to Capsicumize applications.
Reviewed by: cem, AllanJude, bap
libcapsicum: introduce Capsicum helpers
Capsicum helpers are a set of inline functions which goal is to reduce
duplicated patterns used to Capsicumize applications.
Reviewed by: cem, AllanJude, bapt, ed, emaste
Differential Revision: https://reviews.freebsd.org/D8013
show more ...
|
|
Revision tags: release/11.0.1, release/11.0.0, release/10.3.0 |
|
| #
a70cba95 |
| 04-Feb-2016 |
Glen Barber <[email protected]> |
First pass through library packaging.
Sponsored by: The FreeBSD Foundation
|
|
Revision tags: release/10.2.0 |
|
| #
18b2ee82 |
| 15-Jun-2015 |
Baptiste Daroussin <[email protected]> |
Revert r284417 it is not necessary anymore
|
| #
4232f826 |
| 15-Jun-2015 |
Baptiste Daroussin <[email protected]> |
Enforce overwritting SHLIBDIR
Since METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loading
bsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere.
This ma
Enforce overwritting SHLIBDIR
Since METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loading
bsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere.
This makes /lib being populated again.
Reported by: many
show more ...
|
| #
6b129086 |
| 25-Nov-2014 |
Baptiste Daroussin <[email protected]> |
Convert libraries to use LIBADD
While here reduce a bit overlinking
|
|
Revision tags: release/10.1.0, release/9.3.0, release/10.0.0 |
|
| #
0f984a92 |
| 02-Dec-2013 |
Pawel Jakub Dawidek <[email protected]> |
Both libcasper and libcapsicum libraries have to be installed in /lib/,
as they are used by /sbin/casperd.
|
| #
42a85952 |
| 02-Dec-2013 |
Pawel Jakub Dawidek <[email protected]> |
Please welcome casperd daemon. It (and its services) will be responsible for
giving access to functionality that is not available in capability mode
sandbox. The functionality can be precisely restri
Please welcome casperd daemon. It (and its services) will be responsible for
giving access to functionality that is not available in capability mode
sandbox. The functionality can be precisely restricted.
Start with the following services:
- system.dns - provides API compatible to:
- gethostbyname(3),
- gethostbyname2(3),
- gethostbyaddr(3),
- getaddrinfo(3),
- getnameinfo(3),
- system.grp - provides getgrent(3)-compatible API,
- system.pwd - provides getpwent(3)-compatible API,
- system.random - allows to obtain entropy from /dev/random,
- system.sysctl - provides sysctlbyname(3-compatible API.
Sponsored by: The FreeBSD Foundation
show more ...
|