Add missing FreeBSD functions to -legacy when building on macOS/LinuxIn most cases this simply builds the file from lib/libc for missingfunctions (e.g. strlcpy on Linux etc.). In cases where this
Add missing FreeBSD functions to -legacy when building on macOS/LinuxIn most cases this simply builds the file from lib/libc for missingfunctions (e.g. strlcpy on Linux etc.). In cases where this is not possibleI've added an implementation to tools/build/cross-build.The fgetln.c/fgetwln.c/closefrom.c compatibility code was obtained fromhttps://gitlab.freedesktop.org/libbsd/libbsd, but I'm not sure it makessense to import it into to contrib just for these three bootstrap files.Reviewed By: brooksDifferential Revision: https://reviews.freebsd.org/D25978
show more ...
capsicum_helpers: split stream cap bits out of caph_limit_stream()The goal here is to make it so applications can take the rights one wouldnormally get by calling caph_limit_stream() on a descript
capsicum_helpers: split stream cap bits out of caph_limit_stream()The goal here is to make it so applications can take the rights one wouldnormally get by calling caph_limit_stream() on a descriptor and build onthem as needed.The tentatively planned use-case is an application that takes a socket andhooks it up to std{err,out,in} for a fork()d child. It may be feasible toapply limitations to such descriptors as long as it's a superset of thosenormally applied to stdio.Reviewed by: markj, oshobo (prior version; sans manpage addition)Differential Revision: https://reviews.freebsd.org/D22993
pkgbase: Create a FreeBSD-utilities package and make it the default oneThe default package use to be FreeBSD-runtime but it should only containbinaries and libs enough to boot to single user and r
pkgbase: Create a FreeBSD-utilities package and make it the default oneThe default package use to be FreeBSD-runtime but it should only containbinaries and libs enough to boot to single user and repair the system, itis also very handy to have a package that can be tranform to a small mfsroot.So create a new package named FreeBSD-utilities and make it the default one.Also move a few binaries and lib into this package when it make sense.Reviewed by: bapt, gjbDifferential Revision: https://reviews.freebsd.org/D21506
List caph_limit_stream() in the synopsis.Fix typos while here.MFC after: 1 weekSponsored by: The FreeBSD Foundation
libcapsicum: add missing linksReported by: manu
Fix a recusive call introduce in the r340130.
libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limitThe idea behind those functions is not to force consumers to remember that thereis a need to check errno on failure. We already have a caph_
libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limitThe idea behind those functions is not to force consumers to remember that thereis a need to check errno on failure. We already have a caph_enter(3) functionwhich does the same for cap_enter(2).MFC after: 2 weeks
Fix description.
Fix declaration.
With r335636 C++ program use libcasper.h and capsicum_helpers.h.Add __BEGIN_DECLS and __END_DECLS to those headers.
libcapsicum: adding missing man page links
Introduce caph_enter and caph_enter_casper.The caph_enter function should made it easier to sandbox applicationand not force us to remember that we need to check errno on failure.Another function
Introduce caph_enter and caph_enter_casper.The caph_enter function should made it easier to sandbox applicationand not force us to remember that we need to check errno on failure.Another function is also checking if casper is present.Reviewed by: emaste, cem (partially)Differential Revision: https://reviews.freebsd.org/D14557
capsicum_helpers: Add EVENT to default stdio rights setWithout it, calling caph_limit_stdio(3) breaks Irssi.Reviewed by: oshogboMFC after: 2 weeksSponsored by: DARPA, AFRLDifferential Revision
capsicum_helpers: Add EVENT to default stdio rights setWithout it, calling caph_limit_stdio(3) breaks Irssi.Reviewed by: oshogboMFC after: 2 weeksSponsored by: DARPA, AFRLDifferential Revision: https://reviews.freebsd.org/D12622
capsicum_helpers: Add SEEK to default stdio rights setPR: 219173Sponsored by: Dell EMC Isilon
capsicum_helpers: Add FIODTYPE to default ioctls allowedFIODTYPE will be needed by hexdump(1) to speed up the -s flag on devicesthat should be able to support fseek(3); specifically, in an attempt
capsicum_helpers: Add FIODTYPE to default ioctls allowedFIODTYPE will be needed by hexdump(1) to speed up the -s flag on devicesthat should be able to support fseek(3); specifically, in an attempt tocorrect for the fact that most tape drives don't support seeking yet don'tindicate as such when fseeko(3) is invoked. Related: D10939Reviewed by: cem, emaste, oshogboApproved by: emaste (mentor)Differential Revision: https://reviews.freebsd.org/D10937
capsicum_helpers: Add LOOKUP flagAdd a helper routine for opening a directory that is restricted to beingused for opening relative files as stdio streams.I think this will really help basic adap
capsicum_helpers: Add LOOKUP flagAdd a helper routine for opening a directory that is restricted to beingused for opening relative files as stdio streams.I think this will really help basic adaptation of multi-file programs toCapsicum. Rather than having each program initialize a rights object andioctl/fcntl arrays for their root fd for relative opens, consolidate in thelogical place.Reviewed by: oshogbo@Sponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D8743
capsicum_helpers: Squash errors from closed fdsSquash EBADF from closed stdin, stdout, or stderr in caph_limit_stdio().Any program used during special shell scripts may commonly be forkedfrom a p
capsicum_helpers: Squash errors from closed fdsSquash EBADF from closed stdin, stdout, or stderr in caph_limit_stdio().Any program used during special shell scripts may commonly be forkedfrom a parent process with closed standard stream. Do the common sensething for this common use.Reported by: Iblis Lin <iblis AT hs.ntnu.edu.tw>Reviewed by: oshogbo@ (earlier version)Sponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D8657
DIRDEPS_BUILD: Connect new dependencies.MFC after: 2 weeksSponsored by: Dell EMC Isilon
Fix few sentence in the man page.Pointed out by: wblock
Add man pages for Capsicum helpers.Reviewed by: cemDifferential Revision: https://reviews.freebsd.org/D8154
libcapsicum: limit stderrDon't limit stdout twice, instead limit stderr.Pointed out by: rpokala@
libcapsicum: introduce Capsicum helpersCapsicum helpers are a set of inline functions which goal is to reduceduplicated patterns used to Capsicumize applications.Reviewed by: cem, AllanJude, bap
libcapsicum: introduce Capsicum helpersCapsicum helpers are a set of inline functions which goal is to reduceduplicated patterns used to Capsicumize applications.Reviewed by: cem, AllanJude, bapt, ed, emasteDifferential Revision: https://reviews.freebsd.org/D8013
Remove lib/libcapsicum and libexec/casper, brought back aspart of a merge mishap.Reported by: junovitchSponsored by: The FreeBSD Foundation
First pass through library packaging.Sponsored by: The FreeBSD Foundation
META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.This both avoids some dependencies on xinstall.host and allowsbootstrapping on older releases to work due to lack of
META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.This both avoids some dependencies on xinstall.host and allowsbootstrapping on older releases to work due to lack of at least 'install -l'support.Sponsored by: EMC / Isilon Storage Division
12