| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
|
|
| |
ID's to be stored in the ACL.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
| |
permission is in a permission set, required for third-party
applications such as Samba.
Reviewed by: rwatson
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
| |
ACL_UNDEFINED_TAG, ACL_UNDEFINED_ID, ACL_FIRST_ENTRY, ACL_NEXT_ENTRY
Reviewed by: rwatson
Obtained from: TrustedBSD Project
|
|
|
|
| |
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
| |
ACL_PERM_EXEC -> ACL_EXECUTE
ACL_PERM_READ -> ACL_READ
ACL_PERM_WRITE -> ACL_WRITE
Obtained from: TrustedBSD
|
| |
|
|
|
|
| |
Submitted by: jhay
|
| |
|
|
|
|
| |
for the ACL editing library functions to the plain tagged list.
|
|
|
|
|
|
|
|
|
|
| |
functions.
- Place the acl_dup() description in alphabetical order.
- Move the POSIX.1e descriptions under the ENVIRONMENT section to the
STANDARDS section.
Reviewed by: rwatson
Obtained from: TrustedBSD Project
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Makefile, add Makefile.inc needed for libc build; add
#include "namespace.h"/#include "un-namespace.h" pairs around the
includes of sys/acl.h and sys/capability.h, and an additional underscore
in front of the functions that will be overridden in libc_r.
Approved by: rwatson
Obtained from: TrustedBSD Project
|
| |
|
|
|
|
| |
.Fx
|
| |
|
|
|
|
|
|
|
|
| |
o Revise description in light of commits over last month including:
- ACL editing library is now implemented
- ACLs are now implemented
Obtained from: TrustedBSD Project
|
| |
|
|
|
|
|
|
| |
which somehow got mixed up with the acl_get_* man pages.
Submitted by: ru
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
acl_add_perm, acl_clear_perms, acl_copy_entry, acl_create_entry,
acl_delete_perm, acl_get_permset, acl_get_qualifier, acl_get_tag_type,
acl_set_permset, acl_set_qualifier, acl_set_tag_type
This brings us within 4 functions of a full ACL editing library.
Reviewed by: rwatson
|
|
|
|
|
|
|
|
|
| |
- lowercase Nd argument
- mark function arguments with Fa
- mark defined values with Dv
- simply copying POSIX text for RETURN VALUES and ERRORS sections is not
always a good idea. POSIX uses the word "shall" indicating the behavior
the correct implementation should follow.
|
|
|
|
|
|
|
| |
reserved word.
Submitted by: jkh
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
| |
o acl_calc_mask(): calculates the ACL mask entry associated with
the given ACL.
o acl_delete_entry(): remove a specified ACL entry from the given
ACL.
Approved by: rwatson
|
|
|
|
|
|
|
|
|
|
|
| |
utility functions which convert between string namespace names and
numeric constants used by the interface. Right now, two namespaces
are supported, EXTATTR_NAMESPACE_SYSTEM ("system") and
EXTATTR_NAMESPACE_USER ("user"). These functions are used by
various userland EA utilities, rather than hard coding the routines
all over the place.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
| |
o Rename internal library functions so that they are prefixed with
_posix1e or _POSIX1E, removing them from the application namespace (and
potential conflict with other ACL functions elsewhere in the system).
Obtained from: TrustedBSD Project
|
|
|
|
|
|
| |
Seperate does not exist in the english language.
Submitted to look at by: kris
|
| |
|
|
|
|
|
| |
Submitted by: jedgar
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
|
|
|
| |
- errno is already set to ENOMEM (as appropriate) when asprintf(),
strdup(), or acl_init() fails
o acl_to_text.c:
- the return value of the initial strdup() is not checked
- errno is already set to ENOMEM (as appropriate) when asprintf
and acl_init() fails
- let the the default: case use 'goto error_label' for consistency
Submitted by: jedgar
|
|
|
|
| |
Submitted by: jedgar
|
| |
|
|
|
|
|
|
| |
cap_get_fd(), cap_get_file() and cap_get_proc().
Submitted by: jedgar
|
|
|
|
|
|
|
| |
and groupnames, by adding appropriate support to acl_name_to_id()
in acl_support.c
Submitted by: green
|
|
|
|
| |
Approved by: rwatson
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
identification and descriptions of most capabilities, current inheritence
rules, etc. More to follow.
Reviewed by: sheldonh
Obtained from: TrustedBSD Project
|
| |
|
| |
|
|
|
|
|
|
| |
Reviewed by: green
Obtained from: TrustedBSD Project
Security audited by: imp, green
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
u_int64_t flag field, bounding the number of capabilities at 64,
but substantially cleaning up capability logic (there are currently
43 defined capabilities).
o Heads up to anyone actually using capabilities: the constant
assignments for various capabilities have been redone, so any
persistent binary capability stores (i.e., '$posix1e.cap' EA
backing files) must be recreated. If you have one of these,
you'll know about it, so if you have no idea what this means,
don't worry.
o Update libposix1e to reflect this new definition, fixing the
exposed functions that directly manipulate the flags fields.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
| |
status of capabilities (library is complete, kernel work is maintained
outside the tree).
Obtained from: TrustedBSD Project
|
|
|
|
| |
developed and maintained.
|
|
|
|
|
|
|
| |
o Removal of unneeded enum
o Removal of commented out debugging printf()'s.
Obtained from: TrustedBSD Project
|
|
|
|
| |
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
| |
- Include <stdlib.h> and <string.h> as needed for prototypes
- Remove unneeded "error" variables
o Make cap_init() use cap_clear() instead of bzero()
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
| |
o Implementations will remain in the seperately distributed capability
patch until the cap_t type changes are synchronized.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
| |
acl_from_text.3
o Minor whitespace cleanups relative to the TrustedBSD tree to reduce
content-free differences.
Obtained from: TrustedBSD Project
|