freebsd-dev/sys/compat/cloudabi
Ed Schouten 367a13f905 Limit rights on process descriptors.
On CloudABI, the rights bits returned by cap_rights_get() match up with
the operations that you can actually perform on the file descriptor.

Limiting the rights is good, because it makes it easier to get uniform
behaviour across different operating systems. If process descriptors on
FreeBSD would suddenly gain support for any new file operation, this
wouldn't become exposed to CloudABI processes without first extending
the rights.

Extend fork1() to gain a 'struct filecaps' argument that allows you to
construct process descriptors with custom rights. Use this in
cloudabi_sys_proc_fork() to limit the rights to just fstat() and
pdwait().

Obtained from:	https://github.com/NuxiNL/freebsd
2015-07-31 10:21:58 +00:00
..
cloudabi_clock.c Add a futex implementation for CloudABI. 2015-07-27 10:07:29 +00:00
cloudabi_errno.c Add a sysentvec for CloudABI on x86-64. 2015-07-16 18:24:06 +00:00
cloudabi_fd.c Make pipes in CloudABI work. 2015-07-29 17:18:27 +00:00
cloudabi_file.c Implement CloudABI's readdir(). 2015-07-29 06:31:44 +00:00
cloudabi_futex.c Add a futex implementation for CloudABI. 2015-07-27 10:07:29 +00:00
cloudabi_mem.c Implement CloudABI memory management system calls. 2015-07-17 09:00:38 +00:00
cloudabi_proc.c Limit rights on process descriptors. 2015-07-31 10:21:58 +00:00
cloudabi_proto.h
cloudabi_random.c Implement the CloudABI random_get() system call. 2015-07-14 18:45:15 +00:00
cloudabi_sock.c Implement the basic system calls that operate on pathnames. 2015-07-24 07:46:02 +00:00
cloudabi_syscalldefs.h Implement the basic system calls that operate on pathnames. 2015-07-24 07:46:02 +00:00
cloudabi_thread.c Add a futex implementation for CloudABI. 2015-07-27 10:07:29 +00:00
cloudabi_util.h Make fstat() and friends work. 2015-07-28 06:36:49 +00:00