Searched hist:219847 (Results 1 - 5 of 5) sorted by relevance
| /freebsd-9.3-release/sbin/hastd/ | ||
| H A D | subr.h | diff 219847 Mon Mar 21 19:48:21 MDT 2011 pjd When dropping privileges prefer capsicum over chroot+setgid+setuid. We can use capsicum for secondary worker processes and hastctl. When working as primary we drop privileges using chroot+setgid+setuid still as we need to send ioctl(2)s to ggate device, for which capsicum doesn't allow (yet). X-MFC after: capsicum is merged to stable/8 |
| H A D | subr.c | diff 219847 Mon Mar 21 19:48:21 MDT 2011 pjd When dropping privileges prefer capsicum over chroot+setgid+setuid. We can use capsicum for secondary worker processes and hastctl. When working as primary we drop privileges using chroot+setgid+setuid still as we need to send ioctl(2)s to ggate device, for which capsicum doesn't allow (yet). X-MFC after: capsicum is merged to stable/8 |
| H A D | secondary.c | diff 219847 Mon Mar 21 19:48:21 MDT 2011 pjd When dropping privileges prefer capsicum over chroot+setgid+setuid. We can use capsicum for secondary worker processes and hastctl. When working as primary we drop privileges using chroot+setgid+setuid still as we need to send ioctl(2)s to ggate device, for which capsicum doesn't allow (yet). X-MFC after: capsicum is merged to stable/8 |
| H A D | primary.c | diff 219847 Mon Mar 21 19:48:21 MDT 2011 pjd When dropping privileges prefer capsicum over chroot+setgid+setuid. We can use capsicum for secondary worker processes and hastctl. When working as primary we drop privileges using chroot+setgid+setuid still as we need to send ioctl(2)s to ggate device, for which capsicum doesn't allow (yet). X-MFC after: capsicum is merged to stable/8 |
| /freebsd-9.3-release/sbin/hastctl/ | ||
| H A D | hastctl.c | diff 219847 Mon Mar 21 19:48:21 MDT 2011 pjd When dropping privileges prefer capsicum over chroot+setgid+setuid. We can use capsicum for secondary worker processes and hastctl. When working as primary we drop privileges using chroot+setgid+setuid still as we need to send ioctl(2)s to ggate device, for which capsicum doesn't allow (yet). X-MFC after: capsicum is merged to stable/8 |
Completed in 135 milliseconds