066f63003b
To make it easier to understand how Capsicum interacts with linkat() and renameat(), rename the rights to CAP_{LINK,RENAME}AT_{SOURCE,TARGET}. This also addresses a shortcoming in Capsicum, where it isn't possible to disable linking to files stored in a directory. Creating hardlinks essentially makes it possible to access files with additional rights. Reviewed by: rwatson, wblock Differential Revision: https://reviews.freebsd.org/D3411 |
||
---|---|---|
.. | ||
cloudabi_clock.c | ||
cloudabi_errno.c | ||
cloudabi_fd.c | ||
cloudabi_file.c | ||
cloudabi_futex.c | ||
cloudabi_mem.c | ||
cloudabi_proc.c | ||
cloudabi_proto.h | ||
cloudabi_random.c | ||
cloudabi_sock.c | ||
cloudabi_syscalldefs.h | ||
cloudabi_thread.c | ||
cloudabi_util.h |