summaryrefslogtreecommitdiffstats
path: root/sbin/casperd
Commit message (Collapse)AuthorAgeFilesLines
* Approved, oprócz użycie RESTORE_ERRNO() do ustawiania errno.oshogbo2015-05-022-3/+3
| | | | | | | | | | | | | | | | | Change the nvlist_recv() function to take additional argument that specifies flags expected on the received nvlist. Receiving a nvlist with different set of flags than the ones we expect might lead to undefined behaviour, which might be potentially dangerous. Update consumers of this and related functions and update the tests. Approved by: pjd (mentor) Update man page for nvlist_unpack, nvlist_recv, nvlist_xfer, cap_recv_nvlist and cap_xfer_nvlist. Reviewed by: AllanJude Approved by: pjd (mentor)
* Convert sbin/ to LIBADDbapt2014-11-251-2/+1
| | | | Reduce overlinking
* use .Mt to mark up email addresses consistently (part1)bapt2014-06-201-1/+1
| | | | | PR: 191174 Submitted by: Franco Fichtner <franco@lastsummer.de>
* Detach from controlling session of parent. This is similardelphij2014-04-031-0/+3
| | | | | | | | to what is done in daemon(3), which we can not use directly in this context. Reviewed by: pjd MFC after: 2 weeks
* Fix statically-linked build (WITHOUT_DYNAMICROOT).jilles2014-03-161-2/+2
|
* Update most userspace consumers of capability.h to use capsicum.h instead.rwatson2014-03-162-2/+2
| | | | | | | auditdistd is not updated as I will make the change upstream and then do a vendor import sometime in the next week or two. MFC after: 3 weeks
* If the main casperd process exits, zygote process should exit as wellpjd2014-02-091-1/+6
| | | | | | instead of spinning. Reported by: Mikhail <mp@lenta.ru>
* Remove the .Ex macro that I used for testing.brueffer2014-02-011-1/+0
| | | | Pointy hat: brueffer
* Bring the exit status wording closer to what .Ex would produce.brueffer2014-02-011-1/+4
| | | | | | Fixes a typo in the process. MFC after: 1 week
* Always create /var/run/casper with correct permissions and don't depend on thepjd2014-01-091-0/+3
| | | | | | calling process' umask. Submitted by: Mikhail <mp@lenta.ru>
* MFp4 @1189141:pjd2013-12-151-0/+2
| | | | | | Change casperd's zygote process title. MFC after: 1 week
* Some improvements to the casperd manual page.pjd2013-12-081-7/+7
| | | | Submitted by: emaste
* Initialize cookie before use.pjd2013-12-031-0/+1
| | | | | Reported by: Coverity Coverity CID: 1135292
* Please welcome casperd daemon. It (and its services) will be responsible forpjd2013-12-025-0/+1112
giving access to functionality that is not available in capability mode sandbox. The functionality can be precisely restricted. Start with the following services: - system.dns - provides API compatible to: - gethostbyname(3), - gethostbyname2(3), - gethostbyaddr(3), - getaddrinfo(3), - getnameinfo(3), - system.grp - provides getgrent(3)-compatible API, - system.pwd - provides getpwent(3)-compatible API, - system.random - allows to obtain entropy from /dev/random, - system.sysctl - provides sysctlbyname(3-compatible API. Sponsored by: The FreeBSD Foundation
OpenPOWER on IntegriCloud