| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Now that we have a way to obtain entropy in capability mode
(getrandom(2)), libcap_random is obsolete. Remove it.
Bump __FreeBSD_version in case anything happens to use it, though I've
found no consumers.
Reviewed by: delphij, emaste, oshogbo
Relnotes: yes
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D21033
Notes:
svn path=/head/; revision=350307
|
|
|
|
|
|
|
| |
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=350201
|
|
|
|
|
|
|
| |
Those function may be useful to pass fileargs connections around.
Notes:
svn path=/head/; revision=349002
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add some coverage for cap_sysctl(3).
- Add a test for the case where the caller wishes to find the sysctl
output length without specifying an output buffer.
Reviewed by: oshogbo
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D17856
Notes:
svn path=/head/; revision=347536
|
|
|
|
|
|
|
|
|
| |
Reviewed by: oshogbo
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D17855
Notes:
svn path=/head/; revision=347535
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
These complement cap_sysctlbyname(3) to provide a drop-in
replacement for the corresponding libc functions.
Also revise the libcap_sysctl limit interface to provide access
to sysctls by MIB, and to avoid direct manipulation of nvlists
by the caller.
Reviewed by: oshogbo
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D17854
Notes:
svn path=/head/; revision=347534
|
|
|
|
|
|
|
|
|
|
|
| |
This triggers an error in gcc-mips 6.4.0 complaining about unused arguments.
Tested:
* compiled/run on mips32; nothing complained.
Notes:
svn path=/head/; revision=346322
|
|
|
|
|
|
|
|
|
|
| |
Reported by: danfe, mjg
MFC after: 3 weeks
MFC with: r346315
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=346321
|
|
|
|
|
|
|
|
|
|
| |
Reported by: ci.freebsd.org
MFC after: 3 weeks
MFC with: r346315
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=346318
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add fileargs_lstat function to cap_fileargs casper service to be able to
lstat files while in capability mode. It can only lstat files given in
fileargs_init.
Submitted by: Bora Özarslan <borako.ozarslan@gmail.com>
Reviewed by: oshogbo, cem (partial)
MFC after: 3 weeks
Relnotes: Yes
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D19548
Notes:
svn path=/head/; revision=346315
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: Bora Özarslan" <borako.ozarslan@gmail.com>
MFC after: 1 week
MFC with: r346313
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=346314
|
|
|
|
|
|
|
|
|
| |
Submitted by: Bora Özarslan" <borako.ozarslan@gmail.com>
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=346313
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
from its parent so that LOG_PERROR would work. However, this caused
dhclient(8)'s stdio streams to remain open across daemonization, breaking
the ability to capture its foreground output as done in netconfig_ipv4.
Fix this by reverting r341692 and instead passing the parent's stderr
descriptor as an argument to cap_openlog() only when LOG_PERROR is specified
in logopt.
PR: 234514
Suggested by: markj
Reported by: Shawn Webb
Reviewed by: markj, oshogbo
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D18989
Notes:
svn path=/head/; revision=343827
|
|
|
|
|
|
|
|
|
|
|
|
| |
Casper library should not use exit(3) function because before setting it up
applications may register it. Casper doesn't depend on any registered exit
function, so it safe to change this.
Reported by: jceel
MFC after: 2 weeks
Notes:
svn path=/head/; revision=343471
|
|
|
|
|
|
|
|
|
|
|
|
| |
Otherwise cap_openlog(LOG_PERROR) doesn't work.
Reviewed by: oshogbo
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D18457
Notes:
svn path=/head/; revision=341692
|
|
|
|
|
|
|
|
|
|
| |
Casper service can be also used on the kernels without Capsicum support.
Reported by: sbruno
Tested by: sbruno
Notes:
svn path=/head/; revision=341347
|
|
|
|
|
|
|
|
|
|
| |
Some external tools like tcpdump(1) have upstream the changes with old limits
name. Because of that provide compatibility with the old names.
Reported by: emaste
Notes:
svn path=/head/; revision=340638
|
|
|
|
|
|
|
| |
Reported by: markj
Notes:
svn path=/head/; revision=340564
|
|
|
|
|
|
|
|
|
| |
This fix build with gcc.
Reported by: jenkins
Notes:
svn path=/head/; revision=340381
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
cap_fileargs is a Casper service which helps to sandbox applications that need
access to the filesystem namespace. The main purpose of the service is to make
easy to capsicumize applications that works on multiple files passed in argv.
We have a couple example of using it but we still treat this service as an
experimental one.
Reviewed by: emsate (previous version), jonathan (partially)
Discussed with: many
Differential Revision: https://reviews.freebsd.org/D14407
Notes:
svn path=/head/; revision=340373
|
|
|
|
|
|
|
|
| |
Reported by: pjd
MFC after: 3 weeks
Notes:
svn path=/head/; revision=340363
|
|
|
|
|
|
|
|
| |
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=340160
|
|
|
|
|
|
|
|
|
|
| |
Please notice that we still don't clean information in nvlist structures.
Submitted by: David CARLIER <devnexen@gmail.com>
Differential Revision: https://reviews.freebsd.org/D16777
Notes:
svn path=/head/; revision=340142
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The getaddrinfo(3) and gethostbyname(3) are used to return the address for a
given hostname. The getnameinfo(3) and gethostbyaddr(3) are used to return
hostname for a given address. Right now in casper, we have two limitations:
- NAME which allows resolving DNS names.
- ADDR which allows to do revert DNS lookups.
Before this change the rights was mixed up:
NAME - getnameinfo(3) and gethostbyname(3)
ADDR - gethostbyaddr(3) and getaddrinfo(3)
Which no matters on limitation allowed us to resolve DNS names and do DNS
lookups basically by using a different set of functions.
Now the NAME type allows getaddrinfo(3) and gethostbyname (3)functions,
and the ADDR names allow to use gethostbyaddr(3) and getnameinfo(3) functions.
Reviewed by: pjd, bcr
MFC after: 3 weeks
Discussed with: hrs
Differential Revision: https://reviews.freebsd.org/D16930
Notes:
svn path=/head/; revision=340141
|
|
|
|
|
|
|
|
| |
Reviewed by: hrs
Differential Revision: https://reviews.freebsd.org/D16931
Notes:
svn path=/head/; revision=340140
|
|
|
|
|
|
|
|
| |
Reviewed by: hrs
Differential Revision: https://reviews.freebsd.org/D16929
Notes:
svn path=/head/; revision=340139
|
|
|
|
|
|
|
|
| |
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=339675
|
|
|
|
|
|
|
|
| |
MFC after: 2 weeks
Sponsored by: DARPA, AFRL
Notes:
svn path=/head/; revision=337907
|
|
|
|
|
|
|
| |
Add __BEGIN_DECLS and __END_DECLS to those headers.
Notes:
svn path=/head/; revision=335848
|
|
|
|
|
|
|
|
| |
Submitted by: David Carlier <devnexen@gmail.com>
Differential Revision: https://reviews.freebsd.org/D16015
Notes:
svn path=/head/; revision=335678
|
|
|
|
|
|
|
| |
In doing so also fix the libcasper.h header to work in C++.
Notes:
svn path=/head/; revision=335636
|
|
|
|
|
|
|
|
| |
Reviewed by: bcr@
Differential Revision: https://reviews.freebsd.org/D15766
Notes:
svn path=/head/; revision=335588
|
|
|
|
| |
Notes:
svn path=/head/; revision=335389
|
|
|
|
|
|
|
| |
We don't modified it in this function.
Notes:
svn path=/head/; revision=331146
|
|
|
|
|
|
|
| |
I broke it in r331120.
Notes:
svn path=/head/; revision=331137
|
|
|
|
| |
Notes:
svn path=/head/; revision=331125
|
|
|
|
|
|
|
| |
Submitted by: Trond Endrestøl <Trond.Endrestol@ximalas.info>
Notes:
svn path=/head/; revision=331124
|
|
|
|
|
|
|
|
|
|
|
|
| |
Remove obsolete example. All services has they own example.
This example also show old type of limiting method which is
not recommended to use.
Reviewed by: bcr@
Differential Revision: https://reviews.freebsd.org/D14607
Notes:
svn path=/head/; revision=331121
|
|
|
|
|
|
|
|
|
| |
PR: 226102
Reviewed by: bcr@
Differential Revision: https://reviews.freebsd.org/D14606
Notes:
svn path=/head/; revision=331120
|
|
|
|
|
|
|
|
|
| |
PR: 226102
Reviewed by: bcr@
Differential Revision: https://reviews.freebsd.org/D14605
Notes:
svn path=/head/; revision=331119
|
|
|
|
|
|
|
| |
Fix reference to it.
Notes:
svn path=/head/; revision=330031
|
|
|
|
| |
Notes:
svn path=/head/; revision=330025
|
|
|
|
|
|
|
|
|
| |
Reviewed by: @bcr @brueffer
Pointed out by: @brueffer
Differential Revision: https://reviews.freebsd.org/D14410
Notes:
svn path=/head/; revision=329912
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Instead of passing flags (which describe a type of nvlist)
every send/recv we remember them in channel.
It's enough for use to extract them only during unwrap.
This simplify use of Casper.
Reviewed by: bruffer@, bcr@ (both man page)
Differential Revision: https://reviews.freebsd.org/D14196 (man page)
Notes:
svn path=/head/; revision=329452
|
|
|
|
|
|
|
|
| |
After r325062, consumers need to define WITH_CASPER for libcasper to
function as expected.
Notes:
svn path=/head/; revision=328891
|
|
|
|
|
|
|
|
|
|
|
| |
functions.
We should not create MLINKS for that one, because it's break a build.
Submitted by: lwhsu@
Notes:
svn path=/head/; revision=328532
|
|
|
|
|
|
|
|
| |
Reviewed by: bcr@
Differential Revision: https://reviews.freebsd.org/D14084
Notes:
svn path=/head/; revision=328531
|
|
|
|
|
|
|
| |
This should be done with r328494.
Notes:
svn path=/head/; revision=328498
|
|
|
|
| |
Notes:
svn path=/head/; revision=328496
|
|
|
|
|
|
|
|
| |
Reviewed by: bcr@
Differential Revision: https://reviews.freebsd.org/D14072
Notes:
svn path=/head/; revision=328494
|