en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#d0b2dbfa Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/lib/libcasper/services/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#94dc5715 libcasper: Create a minimal cap_netdb serviceCreate a casper service for netdb functions.Initially only cap_getprotobyname is implemented.This is needed for capsicumizing sockstat.Reviewed by: oshogbo, bcr (manpages)Relnotes: yesDifferential Revision: https://reviews.freebsd.org/D24832 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Fri, 26 Mar 2021 19:40:19 +0000 Ryan Moeller <freqlabs@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#832dc76b libcasper: Introduce cap_net a network service for Casper.Reviewed by: emaste, markj (previous version), bcr (man page)Differential Revision: https://reviews.freebsd.org/D24688 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Sun, 16 Aug 2020 18:12:21 +0000 Mariusz Zaborski <oshogbo@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#a76f78dc Remove cap_random(3).Now that we have a way to obtain entropy in capability mode(getrandom(2)), libcap_random is obsolete. Remove it.Bump __FreeBSD_version in case anything happens to use it, though I'vefound no consumers.Reviewed by: delphij, emaste, oshogboRelnotes: yesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D21033 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Wed, 24 Jul 2019 22:50:43 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#cdd6ea94 libcasper: introduce cap_fileargs servicecap_fileargs is a Casper service which helps to sandbox applications that needaccess to the filesystem namespace. The main purpose of the service is to makeeasy to capsicumize applications that works on multiple files passed in argv.We have a couple example of using it but we still treat this service as anexperimental one.Reviewed by: emsate (previous version), jonathan (partially)Discussed with: manyDifferential Revision: https://reviews.freebsd.org/D14407 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Mon, 12 Nov 2018 17:40:47 +0000 Mariusz Zaborski <oshogbo@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#7b4fce76 Introduce syslog service for Casper.syslog in libc secretly reconnects to the daemon.Another issue is that we don't have any information from openlog(3) if wesucceeded to open log or not so we don't know if we are readyto enter cabability mode.Because all of that we decided we need a syslog service for Caspser.Reviewed by: bapt@Differential Revision: https://reviews.freebsd.org/D12824 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Sun, 12 Nov 2017 08:34:25 +0000 Mariusz Zaborski <oshogbo@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#ceb36bc9 Introduce caspermocks.The idea behinds mocks is that we don't need to ifdef a lot of code intools itself but those defines are hidden in the casper library.Right now the mocks are implemented as define/inlines functions.There was a very long discussion how this should be implemented.This approach has some advantages like we don't need to link to any additionallibraries. Unfortunately there are also some disadvantages for example it iseasy to get library out of sync between two versions of functions or that weneed extra define to compile program with casper support.This isn't an ideal solution but it's good enough for now and should simplifycapsicumizing programs. This also doesn't close us any other ways to do thosemocks and this should evolve in time.Discussed with: pjd, emaste, ed, rwatson, bapt, cem, bdreweryDifferential Revision: https://reviews.freebsd.org/D8753 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Sat, 28 Oct 2017 19:23:57 +0000 Mariusz Zaborski <oshogbo@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#38dd1759 Integrate the tests moved in r305626 in to the FreeBSD test suiteThe reachover Kyuafiles were never added, and thus the tests were installedas standalone tests, and not integrated into the full suite.MFC after: 1 weekMFC with: r305626, 305629, r307863, r322447, r322448, r322449 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Sun, 13 Aug 2017 01:04:44 +0000 Enji Cooper <ngie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#88ad7d50 These can build in parallel.Sponsored by: EMC / Isilon Storage Division List of files: /freebsd-14.2/lib/libcasper/services/Makefile Fri, 26 Feb 2016 22:14:04 +0000 Bryan Drewery <bdrewery@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/lib/libcasper/services/Makefile#c501d73c Convert casperd(8) daemon to the libcasper.After calling the cap_init(3) function Casper will fork from it's originalprocess, using pdfork(2). Forking from a process has a lot of advantages:1. We have the same cwd as the original process.2. The same uid, gid and groups.3. The same MAC labels.4. The same descriptor table.5. The same routing table.6. The same umask.7. The same cpuset(1).From now services are also in form of libraries.We also removed libcapsicum at all and converts existing program using Casperto new architecture.Discussed with: pjd, jonathan, ed, drysdale@google.com, emastePartially reviewed by: drysdale@google.com, bdreweryApproved by: pjd (mentor)Differential Revision: https://reviews.freebsd.org/D4277 List of files: /freebsd-14.2/lib/libcasper/services/Makefile Thu, 25 Feb 2016 18:23:40 +0000 Mariusz Zaborski <oshogbo@FreeBSD.org>