d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
c501d73c7e
freebsd-dev/usr.sbin
History
Mariusz Zaborski c501d73c7e Convert casperd(8) daemon to the libcasper. 
After calling the cap_init(3) function Casper will fork from it's original
process, using pdfork(2). Forking from a process has a lot of advantages:
1. We have the same cwd as the original process.
2. The same uid, gid and groups.
3. The same MAC labels.
4. The same descriptor table.
5. The same routing table.
6. The same umask.
7. The same cpuset(1).
From now services are also in form of libraries.
We also removed libcapsicum at all and converts existing program using Casper
to new architecture.

Discussed with:		pjd, jonathan, ed, drysdale@google.com, emaste
Partially reviewed by:	drysdale@google.com, bdrewery
Approved by:		pjd (mentor)
Differential Revision:	https://reviews.freebsd.org/D4277
2016-02-25 18:23:40 +00:00
..
ac Add META_MODE support. 2015-06-13 19:20:56 +00:00
accton Add META_MODE support. 2015-06-13 19:20:56 +00:00
acpi DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
adduser Add META_MODE support. 2015-06-13 19:20:56 +00:00
amd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ancontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
apm Add META_MODE support. 2015-06-13 19:20:56 +00:00
apmd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
arp rtsock requests for deleting interface address lles started to return EPERM 2015-09-27 04:54:29 +00:00
asf Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
audit Add META_MODE support. 2015-06-13 19:20:56 +00:00
auditd Add META_MODE support. 2015-06-13 19:20:56 +00:00
auditdistd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
auditreduce Add META_MODE support. 2015-06-13 19:20:56 +00:00
authpf Add META_MODE support. 2015-06-13 19:20:56 +00:00
autofs DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
bhyve Cleanup unused-but-set-variable spotted by gcc-4.9. 2016-01-26 07:17:21 +00:00
bhyvectl Add a basic bhyvectl manpage. 2016-01-12 10:16:15 +00:00
bhyveload META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
binmiscctl META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
bluetooth DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
boot0cfg Adjust previous fix to conform to the existing style in this file. 2016-01-14 15:49:24 +00:00
boot98cfg META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
bootparamd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
bsdconfig f_substr(): Optimized recipe if running under bash 2016-02-03 04:02:50 +00:00
bsdinstall The zfsboot automated part of bsdinstall now supports UEFI 2016-01-30 15:53:28 +00:00
bsnmpd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
btxld Add META_MODE support. 2015-06-13 19:20:56 +00:00
camdd Clean up unused-but-set-variable spotted by gcc-4.9. 2015-12-31 01:57:55 +00:00
cdcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
chkgrp Revert r286148 2015-08-01 10:40:17 +00:00
chown Add META_MODE support. 2015-06-13 19:20:56 +00:00
chroot Add META_MODE support. 2015-06-13 19:20:56 +00:00
ckdist Add META_MODE support. 2015-06-13 19:20:56 +00:00
clear_locks Add META_MODE support. 2015-06-13 19:20:56 +00:00
config DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
cpucontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
crashinfo Add META_MODE support. 2015-06-13 19:20:56 +00:00
cron crontab: ftruncate() with ftello() instead of ftell(). 2016-02-16 21:19:39 +00:00
crunch DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ctladm Add to CTL initial support for CDROMs and removable devices. 2015-09-27 13:47:28 +00:00
ctld DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ctm Flesh out the SEE ALSO section. 2015-12-14 15:44:34 +00:00
daemon Add META_MODE support. 2015-06-13 19:20:56 +00:00
dconschat Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
devctl - Note that devctl(8) will appear in 10.3 first. 2016-02-02 22:55:03 +00:00
devinfo Add META_MODE support. 2015-06-13 19:20:56 +00:00
digictl Add META_MODE support. 2015-06-13 19:20:56 +00:00
diskinfo Add META_MODE support. 2015-06-13 19:20:56 +00:00
dumpcis Add META_MODE support. 2015-06-13 19:20:56 +00:00
editmap DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
edquota Add META_MODE support. 2015-06-13 19:20:56 +00:00
eeprom META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
etcupdate Refactor the test/ Makefiles after recent changes to bsd.test.mk (r289158) and 2015-10-12 08:16:03 +00:00
extattr Add META_MODE support. 2015-06-13 19:20:56 +00:00
extattrctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
fdcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
fdformat Add META_MODE support. 2015-06-13 19:20:56 +00:00
fdread Add META_MODE support. 2015-06-13 19:20:56 +00:00
fdwrite Add META_MODE support. 2015-06-13 19:20:56 +00:00
fifolog DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
flowctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
fmtree Rename usr.sbin/mtree to usr.sbin/fmtree since it is not what /usr/sbin/mtree 2015-11-09 23:19:36 +00:00
freebsd-update Provide a future release as an example, instead of a historical one. 2016-02-05 21:57:50 +00:00
fstyp Eliminate unneeded includes. 2015-12-28 08:53:31 +00:00
ftp-proxy META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
fwcontrol Fix a ton of speelling errors 2015-10-21 05:37:09 +00:00
getfmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
getpmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
gpioctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
gssd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
gstat Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
hyperv META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
i2c Perform I2C transmission in a single burst when mode is "none" or not set 2015-09-15 11:21:16 +00:00
ifmcstat Add META_MODE support. 2015-06-13 19:20:56 +00:00
inetd - Remove unused union p_un. 2015-09-19 23:48:06 +00:00
iostat Fix the usr.sbin/iostat build with GCC, broken by r295768 2016-02-22 21:40:53 +00:00
iovctl META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
ip6addrctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
ipfwpcap Add META_MODE support. 2015-06-13 19:20:56 +00:00
iscsid Improve reporting of connection problems in iscsid(8). 2016-01-27 18:12:42 +00:00
jail DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
jexec Run a shell in the jail when no command is specified. 2015-07-12 17:03:50 +00:00
jls mdoc: sort Xr 2016-01-18 20:21:38 +00:00
kbdcontrol DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
kbdmap kbdmap: include filename when reporting fopen() failure 2015-11-27 21:27:39 +00:00
keyserv DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
kgmon Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
kgzip META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
kldxref Add support for relocating AArch64 modules to kldxref. This fixes an error 2016-01-13 21:34:15 +00:00
lastlogin Add META_MODE support. 2015-06-13 19:20:56 +00:00
lmcconfig Add META_MODE support. 2015-06-13 19:20:56 +00:00
lpr Use LIBEXECDIR for /usr/libexec. 2015-11-26 01:14:40 +00:00
lptcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
mailstats DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
mailwrapper Add META_MODE support. 2015-06-13 19:20:56 +00:00
makefs Require /sbin/mount_cd9660 when running the cd9660 tests 2016-01-27 06:14:20 +00:00
makemap DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
manctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
memcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
mergemaster All supported releases have the -m support from r186678, so remove 2015-09-29 17:54:01 +00:00
mfiutil Fix a ton of speelling errors 2015-10-21 05:37:09 +00:00
mixer Add META_MODE support. 2015-06-13 19:20:56 +00:00
mld6query Add META_MODE support. 2015-06-13 19:20:56 +00:00
mlxcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_smbfs META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
mountd Allow /etc/exports to contain usernames/groups with spaces in them. 2016-01-07 05:34:39 +00:00
moused Add META_MODE support. 2015-06-13 19:20:56 +00:00
mpsutil Fix type mismatches for malloc(3) and Co. 2015-12-29 11:24:41 +00:00
mptable Stop suggesting -grope argument when -grope argument was actually given 2015-10-22 21:13:35 +00:00
mptutil Add META_MODE support. 2015-06-13 19:20:56 +00:00
mtest Add META_MODE support. 2015-06-13 19:20:56 +00:00
nandsim META MODE: Connect MK_NAND directories. 2015-12-02 05:31:01 +00:00
nandtool META MODE: Connect MK_NAND directories. 2015-12-02 05:31:01 +00:00
ndiscvt DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ndp Fix indent after r292333. 2015-12-19 09:18:01 +00:00
newsyslog newsyslog: treat 'c' flag in the config as 'C' 2015-10-31 09:45:11 +00:00
nfscbd Add META_MODE support. 2015-06-13 19:20:56 +00:00
nfsd Add META_MODE support. 2015-06-13 19:20:56 +00:00
nfsdumpstate Add META_MODE support. 2015-06-13 19:20:56 +00:00
nfsrevoke Add META_MODE support. 2015-06-13 19:20:56 +00:00
nfsuserd Document the new "-manage-gids" option for the nfsuserd daemon. 2015-11-30 22:16:30 +00:00
ngctl ngctl dot: Drop invalid trailing semi-colon 2015-09-22 01:31:01 +00:00
nghook Add META_MODE support. 2015-06-13 19:20:56 +00:00
nmtree Refactor the test/ Makefiles after recent changes to bsd.test.mk (r289158) and 2015-10-12 08:16:03 +00:00
nologin new depends 2015-06-16 23:37:19 +00:00
nscd Add META_MODE support. 2015-06-13 19:20:56 +00:00
ntp DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
nvram use .Mt to mark up email addresses consistently (part2) 2014-06-20 09:57:27 +00:00
ofwdump DIRDEPS_BUILD: Update dependencies. 2015-12-07 23:53:01 +00:00
pc-sysinstall Add more SUBDIR_PARALLEL. 2015-09-26 14:13:51 +00:00
pciconf Fix possible out-of-bounds access detected by Ulrich Spörleins "scan-build". 2016-02-19 14:01:35 +00:00
periodic Add META_MODE support. 2015-06-13 19:20:56 +00:00
pkg Remove some unneeded headers 2016-01-13 17:59:12 +00:00
pmcannotate Add META_MODE support. 2015-06-13 19:20:56 +00:00
pmccontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
pmcstat Fix the date on the pmcstat(8) man page from r291016. 2015-11-18 15:12:24 +00:00
pmcstudy Fix several typos and bugs within pmcstudy. Also highlight the one SB test 2015-12-10 01:52:29 +00:00
pnpinfo META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
portsnap Add META_MODE support. 2015-06-13 19:20:56 +00:00
powerd Add META_MODE support. 2015-06-13 19:20:56 +00:00
ppp Fix a ton of speelling errors 2015-10-21 05:37:09 +00:00
pppctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
praliases DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
praudit Add META_MODE support. 2015-06-13 19:20:56 +00:00
procctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
pstat Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
pw Simplify code for parsing extra groups 2015-12-29 00:08:32 +00:00
pwd_mkdb Following revision r295924, the changes to a db file should be fsynced 2016-02-23 15:28:13 +00:00
quot Add META_MODE support. 2015-06-13 19:20:56 +00:00
quotaon Add META_MODE support. 2015-06-13 19:20:56 +00:00
rarpd Add META_MODE support. 2015-06-13 19:20:56 +00:00
repquota Add META_MODE support. 2015-06-13 19:20:56 +00:00
rip6query Add META_MODE support. 2015-06-13 19:20:56 +00:00
rmt Add META_MODE support. 2015-06-13 19:20:56 +00:00
route6d Add META_MODE support. 2015-06-13 19:20:56 +00:00
rpc.lockd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpc.statd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpc.umntall Add META_MODE support. 2015-06-13 19:20:56 +00:00
rpc.yppasswdd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpc.ypupdated DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpc.ypxfrd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpcbind Fix Coverity warnings regarding r293229 2016-01-13 17:33:50 +00:00
rrenumd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rtadvctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
rtadvd Use strlcpy(). 2015-10-30 00:33:03 +00:00
rtprio Add META_MODE support. 2015-06-13 19:20:56 +00:00
rtsold Use the _SAFE loop variant, since the loop body may remove queue entries. 2016-02-18 01:58:26 +00:00
rwhod Add META_MODE support. 2015-06-13 19:20:56 +00:00
sa Refactor the test/ Makefiles after recent changes to bsd.test.mk (r289158) and 2015-10-12 08:16:03 +00:00
sendmail DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
service Add an additional check to service(8) -e incase rcvar is blank 2015-09-08 22:50:17 +00:00
services_mkdb Remove O_SYNC from the options passed to dbmopen(). 2016-02-10 09:40:45 +00:00
sesutil DIRDEPS_BUILD: Update dependencies. 2016-01-07 19:58:23 +00:00
setfib Add META_MODE support. 2015-06-13 19:20:56 +00:00
setfmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
setpmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
sicontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
smbmsg Add META_MODE support. 2015-06-13 19:20:56 +00:00
snapinfo Add META_MODE support. 2015-06-13 19:20:56 +00:00
spkrtest Add META_MODE support. 2015-06-13 19:20:56 +00:00
spray Add META_MODE support. 2015-06-13 19:20:56 +00:00
syslogd syslogd: Enable repeated line compression for lines of any length. 2016-01-27 16:17:15 +00:00
sysrc Revert r295169 and switch \ ' to " "' 2016-02-02 23:54:07 +00:00
tcpdchk Use LIBEXECDIR for /usr/libexec. 2015-11-26 01:14:40 +00:00
tcpdmatch Use LIBEXECDIR for /usr/libexec. 2015-11-26 01:14:40 +00:00
tcpdrop Add META_MODE support. 2015-06-13 19:20:56 +00:00
tcpdump Convert casperd(8) daemon to the libcasper. 2016-02-25 18:23:40 +00:00
tests Refactor the test/ Makefiles after recent changes to bsd.test.mk (r289158) and 2015-10-12 08:16:03 +00:00
timed Add META_MODE support. 2015-06-13 19:20:56 +00:00
traceroute DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
traceroute6 Add META_MODE support. 2015-06-13 19:20:56 +00:00
trpt Check and fail if drop of privileges failed. 2015-09-01 06:32:02 +00:00
tzsetup Revert r289269 for now. After looking at share/zoneinfo/Makefile this could 2015-10-27 01:26:50 +00:00
uathload Document why we use -z nonexecstack in the Makefile since it 2015-11-21 16:37:11 +00:00
uefisign META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
ugidfw Add META_MODE support. 2015-06-13 19:20:56 +00:00
uhsoctl Prevent use-after-free with ctx->ns in set_nameservers(..), which could occur 2015-12-22 05:57:23 +00:00
unbound Use the new insecure-lan-zones option instead of listing each AS112 zone 2016-02-11 17:37:02 +00:00
usbconfig Add META_MODE support. 2015-06-13 19:20:56 +00:00
usbdump Add META_MODE support. 2015-06-13 19:20:56 +00:00
utx Add META_MODE support. 2015-06-13 19:20:56 +00:00
vidcontrol Add "vidcontrol -i active", to print out active vty number, 2016-01-19 13:09:20 +00:00
vigr META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
vipw Add META_MODE support. 2015-06-13 19:20:56 +00:00
wake Fix a few mandoc warnings. 2015-08-12 10:34:05 +00:00
watch Use strlcpy() when the string is expected to be nul-terminated. 2015-10-06 22:49:25 +00:00
watchdogd Add a new exit-timeout option to watchdogd. 2015-08-19 21:46:12 +00:00
wlandebug Belatedly fix documentation on which interface to use as argument. 2015-08-17 09:18:54 +00:00
wlconfig META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
wpa Update hostapd/wpa_supplicant to version 2.5. 2015-10-18 21:38:25 +00:00
yp_mkdb Staticfy and constify some variables and clean up the code a bit to make it 2015-07-28 02:32:40 +00:00
ypbind Don't need cast malloc. 2015-11-16 03:18:40 +00:00
ypldap Switch from FD_SETSIZE to getdtablesize(2) as it can make the FD to be 2016-01-22 03:02:38 +00:00
yppoll Update META_MODE dependencies. 2015-09-17 05:06:34 +00:00
yppush DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ypserv DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ypset Rename YP to NIS in the manpages. 2015-09-03 07:18:52 +00:00
zic Use more appropriate ${SHAREDIR} rather than /usr/share. 2015-10-27 23:35:02 +00:00
zzz Add META_MODE support. 2015-06-13 19:20:56 +00:00
Makefile Remove uathload from build due to issue with GCC 5.2.0: 2016-01-26 14:34:40 +00:00
Makefile.amd64 Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00
Makefile.arm Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00
Makefile.arm64 arm64: build usr.sbin/acpi subdirectory 2015-11-08 20:56:04 +00:00
Makefile.i386 Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00
Makefile.inc
Makefile.mips Document why we use -z nonexecstack in the Makefile since it 2015-11-21 16:37:11 +00:00
Makefile.powerpc Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00
Makefile.sparc64 Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00