FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F10.3 2016-01-06T19:40:37Z 2016-01-06T19:40:37Z Enji Cooper ngie@FreeBSD.org 2016-01-06T19:40:37Z urn:sha1:672d579bfdd40dd719401446c73499f7efe42337 r292530: - Use 1 for an exit code instead of -1 with err, errx, and exit - Add unistd.h for getuid(3) - Sort #includes r292546: - Convert testcase to TAP format - Use nitems(x) instead of handrolled sizeof(x) / sizeof(*x) macro - Do not mark count != 0 case with bsde_get_rule_count as a failure; this generates false positives on systems with ugidfw rules set on it 2016-01-04T06:57:06Z Enji Cooper ngie@FreeBSD.org 2016-01-04T06:57:06Z urn:sha1:9b1e0f2344e82ab839162c9dd5c09e0bb73df153 r292531: Make test_matches.sh into a series of TAP testcases Use temporary filesystems / memory disks instead of a hardcoded path which doesn't exist on test systems r292532: Mark `subject matching jailid` testcase as an unexpected failure with TODO to ensure that the testcase isn't marked as a failure PR: 205481 r292533: Skip the testcases if mac_bsdextended(4) isn't detected on the system r292545: Redo the TAP integration so it works with Kyua Kyua needs numbers in the TAP results :/, but prove doesn't 2015-12-28T23:32:27Z Enji Cooper ngie@FreeBSD.org 2015-12-28T23:32:27Z urn:sha1:4c01ae24cdb56a00362d0ddf3258d83ac0844c4b Make the mac_portacl testcases work / more robust - A trap(1) call has been added to the test scripts to better ensure that the tests do a better job at trying to restore the test host state at the end of the tests (if the test was interrupted before it would leave the system in an odd state, potentially making the test results for subsequent runs non-deterministic). - Add root user checks - Fix nc(1) usage: -- -o is deprecated -- Using `-w 10` will make the call timeout after 10 seconds so it doesn't block indefinitely - Use local variables - Be more terse in the error messages - Parameterize out "127.0.0.1" Sponsored by: EMC / Isilon Storage Division 2015-12-15T05:47:05Z Enji Cooper ngie@FreeBSD.org 2015-12-15T05:47:05Z urn:sha1:6891c1e2de6a676c6667318f035e8ded71d2fbc0 Skip the MAC portacl tests if MAC_PORTACL support is missing instead of marking them failed Sponsored by: EMC / Isilon Storage Division 2014-12-31T23:25:37Z Enji Cooper ngie@FreeBSD.org 2014-12-31T23:25:37Z urn:sha1:be39f9d2337a354f95e8be9e96a52202de94b428 r264400: NO_MAN= has been deprecated in favor of MAN= for some time, go ahead and finish the job. ncurses is now the only Makefile in the tree that uses it since it wasn't a simple mechanical change, and will be addressed in a future commit. r265836: Remove last two NO_MAN= in the tree. In both of these cases, MAN= is what is needed. 2009-03-14T21:59:12Z Pawel Jakub Dawidek pjd@FreeBSD.org 2009-03-14T21:59:12Z urn:sha1:a71f46d368d9fcfa6966e7e15745f095da1a03e0 2009-03-14T21:54:19Z Pawel Jakub Dawidek pjd@FreeBSD.org 2009-03-14T21:54:19Z urn:sha1:2f9e552de18fd5fe95c14203564eabfc6577412a 2006-04-23T17:06:18Z David Malone dwmalone@FreeBSD.org 2006-04-23T17:06:18Z urn:sha1:89ddbd45e5e8e521f98c3e4a42fe969499f1a70c subject: ranges of uid, ranges of gid, jail id objects: ranges of uid, ranges of gid, filesystem, object is suid, object is sgid, object matches subject uid/gid object type We can also negate individual conditions. The ruleset language is a superset of the previous language, so old rules should continue to work. These changes require a change to the API between libugidfw and the mac_bsdextended module. Add a version number, so we can tell if we're running mismatched versions. Update man pages to reflect changes, add extra test cases to test_ugidfw.c and add a shell script that checks that the the module seems to do what we expect. Suggestions from: rwatson, trhodes Reviewed by: trhodes MFC after: 2 months 2005-04-16T18:41:00Z Tom Rhodes trhodes@FreeBSD.org 2005-04-16T18:41:00Z urn:sha1:932d3e21cc3007ba0ea808842b77eca1e4f97ec2 2005-04-16T12:06:40Z Robert Watson rwatson@FreeBSD.org 2005-04-16T12:06:40Z urn:sha1:babcc5ad79e901cd06b15d2a555e31448bf28b62 Currently only performs basic tests against the library string routines, and queries less important kernel state. Obtained from: TrustedBSD Project Sponsored by: SPAWAR, SPARTA MFC after: 3 days