Ed Maste 2216c6933c Disable connectat/bindat with AT_FDCWD in capmode ...

Previously it was possible to connect a socket (which had the
CAP_CONNECT right) by calling "connectat(AT_FDCWD, ...)" even in
capabilties mode.  This combination should be treated the same as a call
to connect (i.e. forbidden in capabilities mode).  Similarly for bindat.

Disable connectat/bindat with AT_FDCWD in capabilities mode, fix up the
documentation and add tests.

PR:		222632
Submitted by:	Jan Kokemüller <jan.kokemueller@gmail.com>
Reviewed by:	Domagoj Stolfa
MFC after:	1 week
Relnotes:	Yes
Differential Revision:	https://reviews.freebsd.org/D15221

2018-04-30 17:31:06 +00:00

..

amd64

amd64/mp_machdep.c: Fix GCC build after r333059

2018-04-28 17:55:28 +00:00

arm

arm: dts: overlays: Remove the overlay module

2018-04-27 21:15:51 +00:00

arm64

arm64: rockchip: rk_gpio fix rk_gpio_pin_config32

2018-04-26 22:15:09 +00:00

bsm

…

cam

Just assert that the lock is held here, rather than taking it out and

2018-04-13 16:45:35 +00:00

cddl

systrace: track it like sdt probes

2018-04-27 15:16:34 +00:00

compat

Define USEC_PER_MSEC and USEC_PER_SEC in the LinuxKPI.

2018-04-30 09:31:09 +00:00

conf

move smartpqi(4) controller out of NOTES and into sys/amd64/NOTES to

2018-04-26 22:43:25 +00:00

contrib

Import CK as of commit b19ed4c6a56ec93215ab567ba18ba61bf1cfbac8

2018-04-02 23:40:50 +00:00

crypto

opencrypto: Integrate Chacha20 algorithm into OCF

2018-03-29 04:02:50 +00:00

ddb

Restore db_radix on parse error, otherwise we'll silently change it to

2018-04-17 15:44:05 +00:00

dev

cxgbe(4): Use opaque cookies or tid range-checks to determine the

2018-04-30 15:18:38 +00:00

dts

Update mv_gpio driver to new FreeBSD API

2018-04-26 19:00:48 +00:00

fs

[procfs] Split procfs_attr into multiple functions

2018-04-24 14:49:09 +00:00

gdb

amd64: Protect the kernel text, data, and BSS by setting the RW/NX bits

2018-03-06 14:28:37 +00:00

geom

Annotate geom modules with MODULE_VERSION

2018-04-10 19:18:16 +00:00

gnu

gnu/dts: Update our copy of arm dts from Linux 4.16

2018-04-20 19:37:08 +00:00

i386

Fix move of the frame to the normal stack for interrupts occuring from

2018-04-26 21:07:45 +00:00

isa

Revert r330780, it was improperly tested and results in taking a spin

2018-03-11 20:13:15 +00:00

kern

Disable connectat/bindat with AT_FDCWD in capmode

2018-04-30 17:31:06 +00:00

kgssapi

kgssapi: Remove trivial deadcode

2018-02-14 00:12:03 +00:00

libkern

iconv uses strlen directly on user supplied memory

2018-02-26 18:23:36 +00:00

mips

Use %p to print uintptr_t values rather than %z in MIPS single-step code.

2018-04-27 21:22:32 +00:00

modules

Included opt_stack.h in Makefile, to fix module build.

2018-04-30 07:24:31 +00:00

net

Add network device event for priority code point, PCP, changes.

2018-04-26 08:58:27 +00:00

net80211

Use an accessor function to access ifr_data.

2018-03-30 18:50:13 +00:00

netgraph

Correct pseudo misspelling in sys/ comments

2018-02-23 18:15:50 +00:00

netinet

This change re-arranges the fields within the tcp-pcb so that

2018-04-26 21:41:16 +00:00

netinet6

Revert r332894 at the request of the submitter.

2018-04-24 19:55:12 +00:00

netipsec

Merge r1.22-1.23 from NetBSD:

2018-04-26 12:23:31 +00:00

netpfil

To avoid possible deadlock do not acquire JQUEUE_LOCK before callout_drain.

2018-04-13 10:03:30 +00:00

netsmb

Unsign some values related to allocation.

2018-01-22 02:08:10 +00:00

nfs

Remove support for FDDI networks.

2018-04-11 17:28:24 +00:00

nfsclient

style: Remove remaining deprecated MALLOC/FREE macros

2018-01-25 22:25:13 +00:00

nfsserver

…

nlm

Use syscall_helper_register() to register syscalls and initialize though

2018-02-10 01:09:22 +00:00

ofed

Improve copy-and-pasted versions of SIOCGIFADDR.

2018-03-27 20:51:49 +00:00

opencrypto

cryptosoft: Do not exceed crd_len around *crypt_multi

2018-04-19 15:24:21 +00:00

powerpc

Increase the fdtmemreserv array limit to boot on POWER9

2018-04-25 02:42:11 +00:00

riscv

Remove the unused fuwintr() and suiwintr() functions.

2018-04-17 18:04:28 +00:00

rpc

…

security

Use an accessor function to access ifr_data.

2018-03-30 18:50:13 +00:00

sparc64

Remove references to fs_nofault_intr_begin/end.

2018-04-17 22:30:00 +00:00

sys

Unbreak world build after r333064

2018-04-27 15:50:22 +00:00

teken

Pedantic polishing of code to please FlexeLint.

2018-04-08 19:23:50 +00:00

tests

…

tools

Add dtb overlays support

2018-03-24 21:30:24 +00:00

ufs

Renumber soft-update types starting at 1 instead of 0 to avoid confusion

2018-04-05 00:32:01 +00:00

vm

Eliminate some vm object relocks in vm fault.

2018-04-29 12:43:08 +00:00

x86

Fix spelling: Appolo -> Apollo [1].

2018-04-26 19:23:19 +00:00

xdr

…

xen

…

Makefile

…