en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#e77813f7 capsicum: introduce cap_rights_is_empty FunctionBefore this commit, we only had the capability to check if a specificcapability was set (using cap_rights_is_set function). However, therewas no efficient method to determine if a cap_rights_t structure doesn'tcontain any capability. The cap_rights_is_empty function addressesthis gap.PR: 275330Reported by: vini.ipsmaker@gmail.comReviewed by: emaste, markjDifferential Revision: https://reviews.freebsd.org/D42780(cherry picked from commit a7100ae23aca07976926bd8d50223c45149f65d6) List of files: /freebsd-14.2/sys/sys/capsicum.h Mon, 11 Dec 2023 11:09:31 +0000 Mariusz Zaborski <oshogbo@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#39664f1b capsicum.h: Include ktrace.h only in kernelFix cross build failure by including ktrace.h only when _KERNEL isdefined.Fixes: 9bec84131215Approved by: markj (mentor)MFC after: 1 monthSponsored by: The FreeBSD Foundation(cherry picked from commit 34791f4ac79ee41f6986178a3a89d13f37ac156c) List of files: /freebsd-14.2/sys/sys/capsicum.h Mon, 08 Apr 2024 13:27:17 +0000 Jake Freeland <jfree@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#9da71e63 ktrace: Record detailed ECAPMODE violationsWhen a Capsicum violation occurs in the kernel, ktrace will now recorddetailed information pertaining to the violation.For example:- When a namei lookup violation occurs, ktrace will record the path.- When a signal violation occurs, ktrace will record the signal number.- When a sendto(2) violation occurs, ktrace will record the recipient sockaddr.For all violations, the syscall and ABI is recorded.kdump is also modified to display this new information to the user.Reviewed by: oshogbo, markjApproved by: markj (mentor)MFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D40676(cherry picked from commit 9bec84131215ed554f435e208399f36e982246f1) List of files: /freebsd-14.2/sys/sys/capsicum.h Sat, 06 Apr 2024 18:29:45 +0000 Jake Freeland <jfree@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#95ee2897 sys: Remove $FreeBSD$: two-line .h patternRemove /^\s*\*\n \*\s+\$FreeBSD\$$\n/ List of files: /freebsd-14.2/sys/sys/capsicum.h Wed, 16 Aug 2023 17:54:11 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#4d846d26 spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSDThe SPDX folks have obsoleted the BSD-2-Clause-FreeBSD identifier. Catchup to that fact and revert to their recommended match of BSD-2-Clause.Discussed with: pfgMFC After: 3 daysSponsored by: Netflix List of files: /freebsd-14.2/sys/sys/capsicum.h Wed, 10 May 2023 15:40:58 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#fe4f4914 capsicum: move global caps to caprights.h.. for easier inclusion List of files: /freebsd-14.2/sys/sys/capsicum.h Sat, 01 Aug 2020 06:31:58 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#b7e3a3b6 Remove unused SYSINIT macros for capability rights.Static rights are initialized in cap_rights_sysinit().MFC after: 1 week List of files: /freebsd-14.2/sys/sys/capsicum.h Thu, 26 Mar 2020 15:02:37 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#fad58734 capsicum: add cap_rights_init_zero, cap_rights_init_one, cap_rights_set_one... which allow the compiler to generate relevant code in place withoutresorting to calling to a routine at runtime. List of files: /freebsd-14.2/sys/sys/capsicum.h Sat, 15 Feb 2020 01:28:06 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#0f5f49ef u_char -> vm_prot_t in a couple of places, NFCThe latter is a typedef of the former; the typedef exists and these bits arerepresenting vmprot values, so use the correct type.Submitted by: sigsys@gmail.comMFC after: 3 days List of files: /freebsd-14.2/sys/sys/capsicum.h Fri, 14 Feb 2020 02:22:08 +0000 Kyle Evans <kevans@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#1b853b62 capsicum: restore the cap_rights_contains symbolIt is expected to be provided by libc.PR: 244033Reported by: Jan Kokemueller List of files: /freebsd-14.2/sys/sys/capsicum.h Tue, 11 Feb 2020 18:13:53 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#e10f063b fd: streamline fget_unlockedclang has the unfortunate property of paying little attention to predictionhints when faced with a loop spanning the majority of the rotuine.In particular fget_unlocked has an unlikely corner case where it starts almostfrom scratch. Faced with this clang generates a maze of taken jumps, whereasgcc produces jump-free code (in the expected case).Work around the problem by providing a variant which only tries once andresorts to calling the original code if anything goes wrong.While here note that the 'seq' parameter is almost never passed, thus theseldom users are redirected to call it directly. List of files: /freebsd-14.2/sys/sys/capsicum.h Mon, 03 Feb 2020 22:32:49 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#bcd1cf4f capsicum: faster cap_rights_containsInstead of doing a 2 iteration loop (determined at runeimt), take advantageof the fact that the size is already known.While here provdie cap_check_inline so that fget_unlocked does not have todo a function call.Verified with the capsicum suite /usr/tests. List of files: /freebsd-14.2/sys/sys/capsicum.h Mon, 03 Feb 2020 17:08:11 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#1ece6232 Remove references to pdwait4(2) and `CAP_PDWAIT` from rights(4)@cem removed references to pdwait4(2) (a nonexistent syscall) inr320058.This change removes references to pdwait4(2) and `CAP_PDWAIT` inrights(4) to not mislead the user into thinking that pdwait4(2)/`CAP_PDWAIT` isactually implemented in the stock FreeBSD kernel.The goal of this functionality was to simplify monitoring/manipulatingprocesses started with `pdfork`, et al, and avoid races with waiting on pids.The syscall was never completed though--just discussed on the capsicum mailinglist back in 2015:https://lists.cam.ac.uk/pipermail/cl-capsicum-discuss/2015-May/msg00012.html. That being said, there are members of the project (@rwatson, etc) whohave longterm goals to implement this syscall to better secure pdfork(2)calls.PR: 235871Reviewed by: emasteDiscussed with: rwatsonApproved by: emaste (mentor)MFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D18950 List of files: /freebsd-14.2/sys/sys/capsicum.h Thu, 28 Feb 2019 18:12:14 +0000 Enji Cooper <ngie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#98fca94d capsicum: provide cap_rights_fde_inlineReading caps is in the hot path (on each successful fd lookup), butcompletely unnecessarily requires a function call.Approved by: re (gjb)Sponsored by: The FreeBSD Foundation List of files: /freebsd-14.2/sys/sys/capsicum.h Fri, 12 Oct 2018 23:48:10 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#8a656309 kern_sendit: use pre-initialized rights List of files: /freebsd-14.2/sys/sys/capsicum.h Wed, 23 May 2018 01:48:09 +0000 Matt Macy <mmacy@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#71189909 Add additional preinitialized cap_rights List of files: /freebsd-14.2/sys/sys/capsicum.h Sun, 20 May 2018 05:13:12 +0000 Matt Macy <mmacy@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#acbde298 capsicum: propagate const correctness List of files: /freebsd-14.2/sys/sys/capsicum.h Sat, 19 May 2018 05:14:05 +0000 Matt Macy <mmacy@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#cbd92ce6 Eliminate the overhead of gratuitous repeated reinitialization of cap_rights- Add macros to allow preinitialization of cap_rights_t.- Convert most commonly used code paths to use preinitialized cap_rights_t. A 3.6% speedup in fstat was measured with this change.Reported by: mjgReviewed by: oshogboApproved by: sbrunoMFC after: 1 month List of files: /freebsd-14.2/sys/sys/capsicum.h Wed, 09 May 2018 18:47:24 +0000 Matt Macy <mmacy@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#75e9b455 Change trap_enotcap to bool and annotate with __read_frequentlyIt is read on each return to user space. List of files: /freebsd-14.2/sys/sys/capsicum.h Mon, 07 May 2018 23:10:12 +0000 Mateusz Guzik <mjg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/sys/capsicum.h#9b10f59a SPDX: mostly fixes to previous changes.Introduce the recently approved BSD-1-Clause and replace 0BSD whichnever did fit well our use cases. List of files: /freebsd-14.2/sys/sys/capsicum.h Wed, 13 Dec 2017 16:13:17 +0000 Pedro F. Giffuni <pfg@FreeBSD.org>