libcasper/cap_grp tests: Reset the group database handleSome tests verify that the capgrp capability does not permit calls tosetgrent(3), but all tests need to ensure that they reset thecapabilit
libcasper/cap_grp tests: Reset the group database handleSome tests verify that the capgrp capability does not permit calls tosetgrent(3), but all tests need to ensure that they reset thecapability's group database handle, otherwise the local process andcasper process will be out of sync.The cap_pwd tests already handle this.Sponsored by: The FreeBSD FoundationMFC after: 1 month
show more ...
build: provide a default WARNS for all in-tree buildsThe current default is provided in various Makefile.inc in some top-leveldirectories and covers a good portion of the tree, but doesn't cover p
build: provide a default WARNS for all in-tree buildsThe current default is provided in various Makefile.inc in some top-leveldirectories and covers a good portion of the tree, but doesn't cover partsof the build a little deeper (e.g. libcasper).Provide a default in src.sys.mk and set WARNS to it in bsd.sys.mk if thatvariable is defined. This lets us relatively cleanly provide a default WARNSno matter where you're building in the src tree without breaking thingsoutside of the tree.Crunchgen has been updated as a bootstrap tool to work on this changebecause it needs r365605 at a minimum to succeed. The cleanup necessary tosuccessfully walk over this change on WITHOUT_CLEAN builds has been added.There is a supplemental project to this to list all of the warnings that areencountered when the environment has WARNS=6 NO_WERROR=yes:https://warns.kevans.dev -- this project will hopefully eventually go awayin favor of CI doing a much better job than it.Reviewed by: emaste, brooks, ngie (all earlier version)Reviewed by: emaste, arichardson (depend-cleanup.sh change)Differential Revision: https://reviews.freebsd.org/D26455
libcasper(3): Document HISTORY within the manpagesReviewed by: bcr (mentor)Approved by: bcr (mentor)MFC after: 7 daysDifferential Revision: https://reviews.freebsd.org/D24695
libcasper(3): Export functions to C++We must wrap C declarations in __BEGIN / __END_DECLS to avoid C++ name-manglingof the declaration when including the C header; name-mangling causes the linker
libcasper(3): Export functions to C++We must wrap C declarations in __BEGIN / __END_DECLS to avoid C++ name-manglingof the declaration when including the C header; name-mangling causes the linkerto attempt to locate the wrong (C++ ABI) symbol name.Reviewed by: markj, oshogbo (earlier version both)Differential Revision: https://reviews.freebsd.org/D24323
Update Makefile.depend filesUpdate a bunch of Makefile.depend files asa result of adding Makefile.depend.options filesReviewed by: bdreweryMFC after: 1 weekSponsored by: Juniper NetworksDi
Update Makefile.depend filesUpdate a bunch of Makefile.depend files asa result of adding Makefile.depend.options filesReviewed by: bdreweryMFC after: 1 weekSponsored by: Juniper NetworksDifferential Revision: https://reviews.freebsd.org/D22494
pkgbase: Move libcap_ to FreeBSD-runtimeA lot of binaries present in FreeBSD-runtime depend on it so movethe libs there.Reviewed by: bapt, gjbDifferential Revision: https://reviews.freebsd.org/
pkgbase: Move libcap_ to FreeBSD-runtimeA lot of binaries present in FreeBSD-runtime depend on it so movethe libs there.Reviewed by: bapt, gjbDifferential Revision: https://reviews.freebsd.org/D21501
libcasper: using explicit_bzero in cap_grp servicePlease notice that we still don't clean information in nvlist structures.Submitted by: David CARLIER <[email protected]>Differential Revision:
libcasper: using explicit_bzero in cap_grp servicePlease notice that we still don't clean information in nvlist structures.Submitted by: David CARLIER <[email protected]>Differential Revision: https://reviews.freebsd.org/D16777
The gids argument can be declared as const.We don't modified it in this function.
nv was moved to the 9 section.Fix reference to it.
Fix typo.
Introduce channel flags in libcasper.Instead of passing flags (which describe a type of nvlist)every send/recv we remember them in channel.It's enough for use to extract them only during unwrap.
Introduce channel flags in libcasper.Instead of passing flags (which describe a type of nvlist)every send/recv we remember them in channel.It's enough for use to extract them only during unwrap.This simplify use of Casper.Reviewed by: bruffer@, bcr@ (both man page)Differential Revision: https://reviews.freebsd.org/D14196 (man page)
Add SPDX tags for libcasper(3) and services.MFC after: 2 weeks
Document the grp Casper service.Reviewed by: brueffer@, bcr@Differential Revision: https://reviews.freebsd.org/D13821
Build service tests with Casper support.
Casper work's only as shared library - disable building static ones.Reviewed by: bdrewery@Differential Revision: https://reviews.freebsd.org/D12917
Add `static` to `cap_setgrent` prototype in !WITH_CASPER caseThis unbreaks the default powerpc/sparc64 build configuration after r325062.
DIRDEPS_BUILD: Update dependencies.Sponsored by: Dell EMC Isilon
DIRDEPS_BUILD: Connect new directories.Sponsored by: Dell EMC Isilon
Introduce caspermocks.The idea behinds mocks is that we don't need to ifdef a lot of code intools itself but those defines are hidden in the casper library.Right now the mocks are implemented as
Introduce caspermocks.The idea behinds mocks is that we don't need to ifdef a lot of code intools itself but those defines are hidden in the casper library.Right now the mocks are implemented as define/inlines functions.There was a very long discussion how this should be implemented.This approach has some advantages like we don't need to link to any additionallibraries. Unfortunately there are also some disadvantages for example it iseasy to get library out of sync between two versions of functions or that weneed extra define to compile program with casper support.This isn't an ideal solution but it's good enough for now and should simplifycapsicumizing programs. This also doesn't close us any other ways to do thosemocks and this should evolve in time.Discussed with: pjd, emaste, ed, rwatson, bapt, cem, bdreweryDifferential Revision: https://reviews.freebsd.org/D8753
Fix result printing- Flushing stdout prevents the buffer from being printed twice, fixing issues with stdout printing out the testplan, etc, twice.- Don't print out raw source/line numbers; hide
Fix result printing- Flushing stdout prevents the buffer from being printed twice, fixing issues with stdout printing out the testplan, etc, twice.- Don't print out raw source/line numbers; hide them behind comments.MFC after: 1 week
Add HAS_TESTS to all Makefiles that are currently using the`SUBDIR.${MK_TESTS}+= tests` idiom.This is a follow up to r321912.
Convert traditional ${MK_TESTS} conditional idiom for including testdirectories to SUBDIR.${MK_TESTS} idiomThis is being done to pave the way for future work (and homogenity) in^/projects/make-ch
Convert traditional ${MK_TESTS} conditional idiom for including testdirectories to SUBDIR.${MK_TESTS} idiomThis is being done to pave the way for future work (and homogenity) in^/projects/make-check-sandbox .No functional change intended.MFC after: 1 weeks
Set SHLIBDIR before .including src.opts.mk in libcapser servicesbsd.own.mk (included from src.opts.mk) sets SHLIBDIR?=${LIBDIR}, soSHLIBDIR must be set before including either one of them.MFC wi
Set SHLIBDIR before .including src.opts.mk in libcapser servicesbsd.own.mk (included from src.opts.mk) sets SHLIBDIR?=${LIBDIR}, soSHLIBDIR must be set before including either one of them.MFC with: 305626Sponsored by: The FreeBSD Foundation
Move libcasper tests from regression/capsicum/libcasper/ tolib/libcasper/service/${service_name}/tests.Reviewed by: emaste, ngieDifferential Revision: https://reviews.freebsd.org/D7759
Add flags to the Casper services.CASPER_SERVICE_STDIO - Casper will not close the first three descriptors (stdin, stdout and stderr) this can be helpful for debugging.CASPER_SERVICE_FD -
Add flags to the Casper services.CASPER_SERVICE_STDIO - Casper will not close the first three descriptors (stdin, stdout and stderr) this can be helpful for debugging.CASPER_SERVICE_FD - Capser will not close all other descriptors, this can be useful for a filesystem service.
12