Pawel Jakub Dawidek 0cddb12ffd Currently we are unable to use capsicum for the primary worker process, ... because we need to do ioctl(2)s, which are not permitted in the capability mode. What we do now is to chroot(2) to /var/empty, which restricts access to file system name space and we drop privileges to hast user and hast group. This still allows to access to other name spaces, like list of processes, network and sysvipc. To address that, use jail(2) instead of chroot(2). Using jail(2) will restrict access to process table, network (we use ip-less jails) and sysvipc (if security.jail.sysvipc_allowed is turned off). This provides much better separation. MFC after: 1 week		2011-05-14 17:02:03 +00:00
..
activemap.c	Fix a typo in comments.	2011-04-10 15:11:19 +00:00
activemap.h
control.c	Rename HASTCTL_ defines, which are used for conversion between main	2011-04-26 19:38:30 +00:00
control.h	Rename HASTCTL_ defines, which are used for conversion between main	2011-04-26 19:38:30 +00:00
crc32.c
crc32.h
ebuf.c
ebuf.h
event.c
event.h
hast_checksum.c
hast_checksum.h
hast_compression.c	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
hast_compression.h	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
hast_proto.c	Add missing ifdef. This fixes build with NO_OPENSSL.	2011-04-26 19:52:21 +00:00
hast_proto.h	Remove hast_proto_recv(). It was used only in one place, where	2011-04-17 16:18:45 +00:00
hast.conf.5	Increase default timeout from 5 seconds to 20 seconds. 5 seconds is definitely	2011-04-02 09:34:33 +00:00
hast.h	Increase default timeout from 5 seconds to 20 seconds. 5 seconds is definitely	2011-04-02 09:34:33 +00:00
hastd.8	White space cleanups.	2011-03-22 10:39:34 +00:00
hastd.c	Rename HASTCTL_ defines, which are used for conversion between main	2011-04-26 19:38:30 +00:00
hastd.h
hooks.c	Increase debug level of "Checking hooks." message.	2011-03-21 14:53:27 +00:00
hooks.h
lzf.c	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
lzf.h	Allow to compress on-the-wire data using two algorithms:	2011-03-06 23:09:33 +00:00
Makefile	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
metadata.c
metadata.h
nv.c
nv.h
parse.y	Allow to specify remote as 'none' again which was broken by r219351, where	2011-05-08 11:10:56 +00:00
pjdlog.c	Unbreak the build.	2011-03-07 19:54:51 +00:00
pjdlog.h
primary.c	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
proto_common.c	Handle ENOBUFS on send(2) by retrying for a while and logging the problem.	2011-04-02 09:31:02 +00:00
proto_impl.h	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto_socketpair.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto_tcp4.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto_uds.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto.c	The proto API is a general purpose API, so don't use 'hast' in structures or	2011-03-22 16:21:11 +00:00
proto.h	In hast.conf we define the other node's address in 'remote' variable.	2011-03-21 08:54:59 +00:00
rangelock.c
rangelock.h
secondary.c	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
subr.c	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
subr.h	Currently we are unable to use capsicum for the primary worker process,	2011-05-14 17:02:03 +00:00
synch.h
token.l	In hast.conf we define the other node's address in 'remote' variable.	2011-03-21 08:54:59 +00:00