cap_net: correct capability name from addr2name to name2addrPreviously, while checking name2addr capabilities, we mistakenly usedthe addr2name set. This error could cause a process to inadvertentl
cap_net: correct capability name from addr2name to name2addrPreviously, while checking name2addr capabilities, we mistakenly usedthe addr2name set. This error could cause a process to inadvertentlyreset its limitations.Reported by: Shawn Webb <[email protected]>(cherry picked from commit afd74c400075d94e01dd3430844bb290834660ef)
show more ...
Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Remove $FreeBSD$: one-line .c patternRemove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/
cap_net tests: Skip tests if there is no connectivityWhen testing cap_connect() and name/addr lookup functions, skip tests ifwe fail and the error is not ENOTCAPABLE. This makes the tests amenabl
cap_net tests: Skip tests if there is no connectivityWhen testing cap_connect() and name/addr lookup functions, skip tests ifwe fail and the error is not ENOTCAPABLE. This makes the tests amenableto running in CI without Internet connectivity.Reviewed by: oshogboMFC after: 2 weeksDifferential Revision: https://reviews.freebsd.org/D39242
cap_dns, cap_net: fix host and service buffer handlingIf a malicious casper process sent a host or service string that wastoo long, cap_getnameinfo would overrun the caller's buffer by one byte.
cap_dns, cap_net: fix host and service buffer handlingIf a malicious casper process sent a host or service string that wastoo long, cap_getnameinfo would overrun the caller's buffer by one byte.The backends for this function needlessly allocated one extra bytefor these buffers. This was harmless, but could be confusing to readers.Reported by: Coverity (an internal run at Dell)Reviewed by: oshogbo, emasteMFC after: 1 weekSponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D39347
cap_net: CAPNET_CONNECT and CAPNET_CONNECTDNS are not mutually exclusiveFix the for the CAPNET_CONNECT and CAPNET_CONNECTDNS.Add test to ensure that this is possible.
cap_net: allow to use the service without setting the limitsAdd test to ensure that this is possible.
libcasper: Introduce cap_net a network service for Casper.Reviewed by: emaste, markj (previous version), bcr (man page)Differential Revision: https://reviews.freebsd.org/D24688