diff options
author | pjd <pjd@FreeBSD.org> | 2011-03-21 21:31:50 +0000 |
---|---|---|
committer | pjd <pjd@FreeBSD.org> | 2011-03-21 21:31:50 +0000 |
commit | b84a0251e39001ae198d49f18d470ceb827c5dc8 (patch) | |
tree | 423b8a1794223b5607ff01f014ec10c088e66a0b /sbin/hastd/subr.h | |
parent | 3591d152b2cc88ff15075e1eba664d04f99fbcd2 (diff) | |
download | FreeBSD-src-b84a0251e39001ae198d49f18d470ceb827c5dc8.zip FreeBSD-src-b84a0251e39001ae198d49f18d470ceb827c5dc8.tar.gz |
When dropping privileges prefer capsicum over chroot+setgid+setuid.
We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).
X-MFC after: capsicum is merged to stable/8
Diffstat (limited to 'sbin/hastd/subr.h')
-rw-r--r-- | sbin/hastd/subr.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sbin/hastd/subr.h b/sbin/hastd/subr.h index 0b9b555..179fd00 100644 --- a/sbin/hastd/subr.h +++ b/sbin/hastd/subr.h @@ -50,6 +50,6 @@ int snprlcat(char *str, size_t size, const char *fmt, ...); int provinfo(struct hast_resource *res, bool dowrite); const char *role2str(int role); -int drop_privs(void); +int drop_privs(bool usecapsicum); #endif /* !_SUBR_H_ */ |