Pawel Jakub Dawidek 7493f24ee6 - Implement two new system calls:
int bindat(int fd, int s, const struct sockaddr *addr, socklen_t addrlen);
	int connectat(int fd, int s, const struct sockaddr *name, socklen_t namelen);

  which allow to bind and connect respectively to a UNIX domain socket with a
  path relative to the directory associated with the given file descriptor 'fd'.

- Add manual pages for the new syscalls.

- Make the new syscalls available for processes in capability mode sandbox.

- Add capability rights CAP_BINDAT and CAP_CONNECTAT that has to be present on
  the directory descriptor for the syscalls to work.

- Update audit(4) to support those two new syscalls and to handle path
  in sockaddr_un structure relative to the given directory descriptor.

- Update procstat(1) to recognize the new capability rights.

- Document the new capability rights in cap_rights_limit(2).

Sponsored by:	The FreeBSD Foundation
Discussed with:	rwatson, jilles, kib, des
2013-03-02 21:11:30 +00:00
..
2008-04-03 02:41:54 +00:00
2008-04-03 02:41:54 +00:00
2013-03-02 21:11:30 +00:00
2013-03-02 00:53:12 +00:00
2013-02-09 17:13:51 +00:00
2011-05-13 16:29:57 +00:00
2013-01-15 14:09:08 +00:00
2013-03-02 21:11:30 +00:00
2013-03-02 00:53:12 +00:00
2012-05-08 18:56:21 +00:00
2011-11-10 06:20:18 +00:00
2012-03-29 16:20:20 +00:00
2012-05-08 18:56:21 +00:00
2012-10-20 19:38:22 +00:00
2013-03-02 21:11:30 +00:00
2012-05-08 18:56:21 +00:00
2012-05-08 18:56:21 +00:00
2008-11-11 14:55:59 +00:00
2009-06-15 21:52:27 +00:00
2012-01-15 20:14:52 +00:00
2012-05-08 18:56:21 +00:00
2010-12-18 10:09:07 +00:00
2010-10-13 16:57:06 +00:00
2012-06-02 10:50:25 +00:00
2013-03-02 21:11:30 +00:00
2012-05-08 18:56:21 +00:00
2012-05-08 18:56:21 +00:00
2012-05-08 18:56:21 +00:00
2012-11-13 12:56:42 +00:00