summaryrefslogtreecommitdiffstats
path: root/sbin/casperd
Commit message (Collapse)AuthorAgeFilesLines
* use .Mt to mark up email addresses consistently (part1)bapt2014-06-201-1/+1
| | | | | PR: 191174 Submitted by: Franco Fichtner <franco@lastsummer.de>
* Detach from controlling session of parent. This is similardelphij2014-04-031-0/+3
| | | | | | | | to what is done in daemon(3), which we can not use directly in this context. Reviewed by: pjd MFC after: 2 weeks
* Fix statically-linked build (WITHOUT_DYNAMICROOT).jilles2014-03-161-2/+2
|
* Update most userspace consumers of capability.h to use capsicum.h instead.rwatson2014-03-162-2/+2
| | | | | | | auditdistd is not updated as I will make the change upstream and then do a vendor import sometime in the next week or two. MFC after: 3 weeks
* If the main casperd process exits, zygote process should exit as wellpjd2014-02-091-1/+6
| | | | | | instead of spinning. Reported by: Mikhail <mp@lenta.ru>
* Remove the .Ex macro that I used for testing.brueffer2014-02-011-1/+0
| | | | Pointy hat: brueffer
* Bring the exit status wording closer to what .Ex would produce.brueffer2014-02-011-1/+4
| | | | | | Fixes a typo in the process. MFC after: 1 week
* Always create /var/run/casper with correct permissions and don't depend on thepjd2014-01-091-0/+3
| | | | | | calling process' umask. Submitted by: Mikhail <mp@lenta.ru>
* MFp4 @1189141:pjd2013-12-151-0/+2
| | | | | | Change casperd's zygote process title. MFC after: 1 week
* Some improvements to the casperd manual page.pjd2013-12-081-7/+7
| | | | Submitted by: emaste
* Initialize cookie before use.pjd2013-12-031-0/+1
| | | | | Reported by: Coverity Coverity CID: 1135292
* Please welcome casperd daemon. It (and its services) will be responsible forpjd2013-12-025-0/+1112
giving access to functionality that is not available in capability mode sandbox. The functionality can be precisely restricted. Start with the following services: - system.dns - provides API compatible to: - gethostbyname(3), - gethostbyname2(3), - gethostbyaddr(3), - getaddrinfo(3), - getnameinfo(3), - system.grp - provides getgrent(3)-compatible API, - system.pwd - provides getpwent(3)-compatible API, - system.random - allows to obtain entropy from /dev/random, - system.sysctl - provides sysctlbyname(3-compatible API. Sponsored by: The FreeBSD Foundation
OpenPOWER on IntegriCloud