FreeBSD src
Go to file
Ed Schouten 367a13f905 Limit rights on process descriptors.
On CloudABI, the rights bits returned by cap_rights_get() match up with
the operations that you can actually perform on the file descriptor.

Limiting the rights is good, because it makes it easier to get uniform
behaviour across different operating systems. If process descriptors on
FreeBSD would suddenly gain support for any new file operation, this
wouldn't become exposed to CloudABI processes without first extending
the rights.

Extend fork1() to gain a 'struct filecaps' argument that allows you to
construct process descriptors with custom rights. Use this in
cloudabi_sys_proc_fork() to limit the rights to just fstat() and
pdwait().

Obtained from:	https://github.com/NuxiNL/freebsd
2015-07-31 10:21:58 +00:00
bin Cast uid and gid to the correct type for display to solve segfault in ls(1) on 32bit arches 2015-07-24 20:20:59 +00:00
cddl Fix a rendering issue in the zfs(8) manual. 2015-07-30 19:34:24 +00:00
contrib GCC: Add a new option "-fstack-protector-strong" 2015-07-30 14:31:09 +00:00
crypto Fix multiple OpenSSH vulnerabilities. 2015-07-28 19:58:38 +00:00
etc - Fix compilation after r285909 with USB_DEBUG defined. 2015-07-27 14:43:14 +00:00
games Fix a typo. 2015-07-02 11:46:35 +00:00
gnu Allow ELF Tool Chain elfcopy to be installed as objcopy 2015-07-29 18:45:38 +00:00
include Use the __sentinel attribute. 2015-07-08 16:21:10 +00:00
kerberos5 Fix a typo introduced in r262209. 2015-06-18 21:18:43 +00:00
lib unlink(2): Note the possibility for ENOSPC to be returned on ZFS. 2015-07-28 22:48:58 +00:00
libexec Staticfy and constify some variables and clean up the code a bit to make it 2015-07-28 02:32:40 +00:00
release Disable blkif indirect segment I/Os in EC2 by default due to performance 2015-07-30 04:01:00 +00:00
rescue Add META_MODE support. 2015-06-13 19:20:56 +00:00
sbin Teach sysctl about the new optional suffix after IK to specify 2015-07-29 02:34:25 +00:00
secure Merge OpenSSL 1.0.1p. 2015-07-09 17:07:45 +00:00
share The implementation note isn't true anymore.. 2015-07-31 03:28:02 +00:00
sys Limit rights on process descriptors. 2015-07-31 10:21:58 +00:00
targets Updated depends 2015-07-03 06:11:54 +00:00
tests Fixed shutdown(2) unix(4) tests for SOCK_SEQPACKET after r285910 (by ed). 2015-07-29 13:49:34 +00:00
tools MK_ELFCOPY_AS_OBJCOPY should be a variable 2015-07-29 21:41:15 +00:00
usr.bin Buffer overflow in wall(1). 2015-07-31 01:12:31 +00:00
usr.sbin Improve strtounum 2015-07-30 06:14:47 +00:00
.arcconfig Add repository.callsign, to help arcanist figure out what repo it's 2015-07-02 22:23:52 +00:00
.arclint phabricator related changes: 2015-04-20 20:33:22 +00:00
COPYRIGHT Bump copyright year. 2014-12-31 10:00:43 +00:00
LOCKS Explicitly require Security Officer's approval for kernel PRNG bits. 2013-09-17 14:19:05 +00:00
MAINTAINERS Remove cokane@ from MAINTAINERS for 3dfx(4)/tdfx(4) because their email 2014-11-25 05:25:12 +00:00
Makefile Import OpenSSL 1.0.1p. 2015-07-09 16:41:34 +00:00
Makefile.inc1 First cut of DTrace for AArch64. 2015-07-01 15:51:11 +00:00
ObsoleteFiles.inc Drop libarchive.pc 2015-07-19 21:31:52 +00:00
README Import OpenSSL 1.0.1p. 2015-07-09 16:41:34 +00:00
UPDATING Clarify historical practice of not removing old entries. Add entry for 2015-07-29 21:15:50 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree.  See build(7)
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
for more information, including setting make(1) variables.

The `buildkernel` and `installkernel` targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process.  See build(7), config(8),
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
for more information.

Note: If you want to build and install the kernel with the
`buildkernel` and `installkernel` targets, you might need to build
world before.  More information is available in the handbook.

The kernel configuration files reside in the sys/<arch>/conf
sub-directory.  GENERIC is the default configuration used in release builds.
NOTES contains entries and documentation for all possible
devices, not just those commonly used.


Source Roadmap:
---------------

bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tests		Regression tests which can be run by Kyua.  See tests/README
		for additional information.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html