Pawel Jakub Dawidek 0cddb12ffd Currently we are unable to use capsicum for the primary worker process, ... because we need to do ioctl(2)s, which are not permitted in the capability mode. What we do now is to chroot(2) to /var/empty, which restricts access to file system name space and we drop privileges to hast user and hast group. This still allows to access to other name spaces, like list of processes, network and sysvipc. To address that, use jail(2) instead of chroot(2). Using jail(2) will restrict access to process table, network (we use ip-less jails) and sysvipc (if security.jail.sysvipc_allowed is turned off). This provides much better separation. MFC after: 1 week		2011-05-14 17:02:03 +00:00
..
activemap.c	Fix a typo in comments.	2011-04-10 15:11:19 +00:00
activemap.h
control.c	Rename HASTCTL_ defines, which are used for conversion between main	2011-04-26 19:38:30 +00:00
control.h	Rename HASTCTL_ defines, which are used for conversion between main	2011-04-26 19:38:30 +00:00
crc32.c	Allow to checksum on-the-wire data using either CRC32 or SHA256.	2011-03-06 22:56:14 +00:00
crc32.h	Allow to checksum on-the-wire data using either CRC32 or SHA256.	2011-03-06 22:56:14 +00:00
ebuf.c	Fix typos.	2010-06-14 21:44:58 +00:00
ebuf.h
event.c	Forgot to add event.c and event.h in r212038.	2010-08-31 09:38:43 +00:00
event.h	Forgot to add event.c and event.h in r212038.	2010-08-31 09:38:43 +00:00
hast_checksum.c	Allow to checksum on-the-wire data using either CRC32 or SHA256.	2011-03-06 22:56:14 +00:00
hast_checksum.h	Allow to checksum on-the-wire data using either CRC32 or SHA256.	2011-03-06 22:56:14 +00:00
hast_compression.c	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
hast_compression.h	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
hast_proto.c	Add missing ifdef. This fixes build with NO_OPENSSL.	2011-04-26 19:52:21 +00:00
hast_proto.h	Remove hast_proto_recv(). It was used only in one place, where	2011-04-17 16:18:45 +00:00
hast.conf.5	Increase default timeout from 5 seconds to 20 seconds. 5 seconds is definitely	2011-04-02 09:34:33 +00:00
hast.h	Increase default timeout from 5 seconds to 20 seconds. 5 seconds is definitely	2011-04-02 09:34:33 +00:00
hastd.8	White space cleanups.	2011-03-22 10:39:34 +00:00
hastd.c	Rename HASTCTL_ defines, which are used for conversion between main	2011-04-26 19:38:30 +00:00
hastd.h	Add function to assert that the only descriptors we have open are the ones	2011-01-28 21:56:47 +00:00
hooks.c	Increase debug level of "Checking hooks." message.	2011-03-21 14:53:27 +00:00
hooks.h	hook_check() is now only used to report about long-running hooks, so the	2010-10-04 21:43:06 +00:00
lzf.c	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
lzf.h	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
Makefile	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
metadata.c	Plug memory leaks.	2010-06-14 21:25:20 +00:00
metadata.h
nv.c	Add nv_assert() which allows to assert that the given name exists.	2011-01-22 22:38:18 +00:00
nv.h	Add nv_assert() which allows to assert that the given name exists.	2011-01-22 22:38:18 +00:00
parse.y	Allow to specify remote as 'none' again which was broken by r219351, where	2011-05-08 11:10:56 +00:00
pjdlog.c	Unbreak the build.	2011-03-07 19:54:51 +00:00
pjdlog.h	Rename pjdlog_verify() to pjdlog_abort() as it better describes what the	2011-01-31 15:52:00 +00:00
primary.c	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
proto_common.c	Handle ENOBUFS on send(2) by retrying for a while and logging the problem.	2011-04-02 09:31:02 +00:00
proto_impl.h	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto_socketpair.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto_tcp4.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto_uds.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto.h	In hast.conf we define the other node's address in 'remote' variable.	2011-03-21 08:54:59 +00:00
rangelock.c
rangelock.h
secondary.c	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
subr.c	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
subr.h	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
synch.h	Plug memory leaks.	2010-10-24 15:41:23 +00:00
token.l	In hast.conf we define the other node's address in 'remote' variable.	2011-03-21 08:54:59 +00:00