303975 |
11-Aug-2016 |
gjb |
Copy stable/11@r303970 to releng/11.0 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, and rename it to RC1.
Update __FreeBSD_version.
Use the quarterly branch for the default FreeBSD.conf pkg(8) repo and the dvd1.iso packages population.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation |
302408 |
08-Jul-2016 |
gjb |
Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle. Prune svn:mergeinfo from the new branch, as nothing has been merged here.
Additional commits post-branch will follow.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
297982 |
14-Apr-2016 |
oshogbo |
Set NULL to the ai_next pointer which fix cap_getaddrinfo(). Add regression test case.
PR: 195551 Submitted by: Mikhail <mp39590@gmail.com> Approved by: pjd (mentor)
|
296047 |
25-Feb-2016 |
oshogbo |
Convert casperd(8) daemon to the libcasper. After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture.
Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277
|
285063 |
02-Jul-2015 |
oshogbo |
Let the nv.h and dnv.h includes be only in sys directory.
Change consumers to include those files from sys. Add duplicated files to ObsoleteFiles.
Approved by: pjd (mentor)
|
263234 |
16-Mar-2014 |
rwatson |
Update most userspace consumers of capability.h to use capsicum.h instead.
auditdistd is not updated as I will make the change upstream and then do a vendor import sometime in the next week or two.
MFC after: 3 weeks
|
260253 |
04-Jan-2014 |
pjd |
MFp4 @1189766:
- Compile the tests with .t suffix, so prove can use them directly. - The CHECKX() macro should increment ntest just like the CHECK() macro. - For consistency remove # from the pwd.t output.
Submitted by: Mariusz Zaborski <oshogbo@FreeBSD.org>
|
258849 |
02-Dec-2013 |
pjd |
Regression tests for existing Casper services.
Sponsored by: The FreeBSD Foundation
|
247676 |
02-Mar-2013 |
pjd |
If all ioctls are allowed, cap_ioctls_get(2) will return CAP_IOCTLS_ALL. Update regression tests.
|
247606 |
02-Mar-2013 |
pjd |
Add regression tests for the new Capsicum system calls.
Sponsored by: The FreeBSD Foundation
|