diff options
| author | pjd <pjd@FreeBSD.org> | 2013-03-14 23:14:47 +0000 |
|---|---|---|
| committer | pjd <pjd@FreeBSD.org> | 2013-03-14 23:14:47 +0000 |
| commit | 3d6eb97a85e1458edb83b958747f6fe433bf1e12 (patch) | |
| tree | 59ba89f097ec29bb2dfddd87e34880464f013a5a /lib/libc | |
| parent | aa00097868036dc0ea961abd1052089a0aeaa46a (diff) | |
| download | FreeBSD-src-3d6eb97a85e1458edb83b958747f6fe433bf1e12.zip FreeBSD-src-3d6eb97a85e1458edb83b958747f6fe433bf1e12.tar.gz | |
Now that ioctl(2) is allowed in capability mode and we can limit ioctls for the
given descriptors, use Capsicum sandboxing for hastd in primary and secondary
modes. Allow for DIOCGDELETE and DIOCGFLUSH ioctls on provider descriptor and
for G_GATE_CMD_MODIFY, G_GATE_CMD_START, G_GATE_CMD_DONE and G_GATE_CMD_DESTROY
on GEOM Gate descriptor.
Sponsored by: The FreeBSD Foundation
Diffstat (limited to 'lib/libc')
0 files changed, 0 insertions, 0 deletions
