4d8dc3b838
We can use capsicum for secondary worker processes and hastctl. When working as primary we drop privileges using chroot+setgid+setuid still as we need to send ioctl(2)s to ggate device, for which capsicum doesn't allow (yet). X-MFC after: capsicum is merged to stable/8 |
||
---|---|---|
.. | ||
hastctl.8 | ||
hastctl.c | ||
Makefile |