5 Commits

Author	SHA1	Message	Date
Xin LI	37c55e8558	Detach from controlling session of parent. This is similar ... to what is done in daemon(3), which we can not use directly in this context. Reviewed by: pjd MFC after: 2 weeks	2014-04-03 22:14:18 +00:00
Robert Watson	b881b8be1d	Update most userspace consumers of capability.h to use capsicum.h instead. ... auditdistd is not updated as I will make the change upstream and then do a vendor import sometime in the next week or two. MFC after: 3 weeks	2014-03-16 11:04:44 +00:00
Pawel Jakub Dawidek	bf90d007d3	If the main casperd process exits, zygote process should exit as well ... instead of spinning. Reported by: Mikhail <mp@lenta.ru>	2014-02-09 21:42:01 +00:00
Pawel Jakub Dawidek	36492dd3f5	MFp4 @1189141: ... Change casperd's zygote process title. MFC after: 1 week	2013-12-15 22:59:34 +00:00
Pawel Jakub Dawidek	42a8595256	Please welcome casperd daemon. It (and its services) will be responsible for ... giving access to functionality that is not available in capability mode sandbox. The functionality can be precisely restricted. Start with the following services: - system.dns - provides API compatible to: - gethostbyname(3), - gethostbyname2(3), - gethostbyaddr(3), - getaddrinfo(3), - getnameinfo(3), - system.grp - provides getgrent(3)-compatible API, - system.pwd - provides getpwent(3)-compatible API, - system.random - allows to obtain entropy from /dev/random, - system.sysctl - provides sysctlbyname(3-compatible API. Sponsored by: The FreeBSD Foundation	2013-12-02 08:21:28 +00:00