#
280250 |
|
19-Mar-2015 |
rwatson |
Merge an applicable subset of r263234 from HEAD to stable/10:
Update most userspace consumers of capability.h to use capsicum.h instead.
auditdistd is not updated as I will make the change upstream and then do a vendor import sometime in the next week or two.
Note that a significant fraction does not apply, as FreeBSD 10 doesn't contain a Capsicumised ping, casperd, libcasper, etc. When these features are merged, the capsicum.h change will need to be merged with them.
Sponsored by: Google, Inc.
|
#
224793 |
|
12-Aug-2011 |
jonathan |
Test *at(2) calls with capability-mode lookup.
This commit adds regression testing for openat(), fstatat(), etc. with capability scoping ("strict relative" lookup), which applies: - in capability mode - when performing any *at() lookup relative to a capability
These tests will fail until the *at() code is committed; on my local instance, with the *at() changes, they all pass.
Approved by: re (kib), mentor (rwatson) Sponsored by: Google Inc
|