Pawel Jakub Dawidek
7493f24ee6
- Implement two new system calls: ...
int bindat(int fd, int s, const struct sockaddr *addr, socklen_t addrlen);
int connectat(int fd, int s, const struct sockaddr *name, socklen_t namelen);
which allow to bind and connect respectively to a UNIX domain socket with a
path relative to the directory associated with the given file descriptor 'fd'.
- Add manual pages for the new syscalls.
- Make the new syscalls available for processes in capability mode sandbox.
- Add capability rights CAP_BINDAT and CAP_CONNECTAT that has to be present on
the directory descriptor for the syscalls to work.
- Update audit(4) to support those two new syscalls and to handle path
in sockaddr_un structure relative to the given directory descriptor.
- Update procstat(1) to recognize the new capability rights.
- Document the new capability rights in cap_rights_limit(2).
Sponsored by: The FreeBSD Foundation
Discussed with: rwatson, jilles, kib, des
2013-03-02 21:11:30 +00:00
2010-04-25 17:38:53 +00:00
2013-01-04 23:44:22 +00:00
2012-10-22 02:12:06 +00:00
2008-10-19 08:41:10 +00:00
2012-10-22 03:31:22 +00:00
2012-10-22 01:18:41 +00:00
2010-01-02 10:27:05 +00:00
2010-01-10 08:02:07 +00:00
2011-11-06 08:13:51 +00:00
2010-12-11 08:32:16 +00:00
2012-11-15 15:06:00 +00:00
2010-12-11 08:32:16 +00:00
2010-01-02 10:27:05 +00:00
2013-02-04 17:41:17 +00:00
2012-01-10 02:58:29 +00:00
2012-03-29 05:02:12 +00:00
2010-01-02 10:27:05 +00:00
2008-10-19 08:41:10 +00:00
2010-12-28 10:08:50 +00:00
2011-11-06 08:13:58 +00:00
2013-01-15 05:33:40 +00:00
2011-11-06 08:14:03 +00:00
2011-11-06 08:14:09 +00:00
2012-10-19 14:49:42 +00:00
2011-11-06 18:49:03 +00:00
2012-02-22 06:27:20 +00:00
2012-11-15 15:06:18 +00:00
2012-10-20 10:33:15 +00:00
2013-02-12 05:56:00 +00:00
2011-11-06 08:14:16 +00:00
2011-11-06 08:14:22 +00:00
2011-11-06 08:14:28 +00:00
2010-11-22 14:16:22 +00:00
2010-12-11 08:32:16 +00:00
2011-11-06 08:14:34 +00:00
2012-03-29 05:02:12 +00:00
2012-03-22 08:48:42 +00:00
2012-01-03 18:51:58 +00:00
2012-07-28 06:38:44 +00:00
2011-11-06 08:14:40 +00:00
2011-11-06 08:14:45 +00:00
2013-02-14 19:46:41 +00:00
2010-12-11 08:32:16 +00:00
2012-10-19 14:49:42 +00:00
2012-11-24 04:15:25 +00:00
2013-02-28 01:22:14 +00:00
2010-01-02 10:27:05 +00:00
2010-12-11 08:32:16 +00:00
2013-02-19 18:28:25 +00:00
2012-11-04 09:27:01 +00:00
2013-02-09 13:31:59 +00:00
2010-02-12 15:07:24 +00:00
2012-10-19 14:49:42 +00:00
2012-02-22 06:27:20 +00:00
2010-12-11 08:32:16 +00:00
2011-11-06 18:49:30 +00:00
2010-12-11 08:32:16 +00:00
2012-12-09 22:54:03 +00:00
2012-04-19 03:20:13 +00:00
2010-01-02 10:27:05 +00:00
2013-02-10 18:56:37 +00:00
2012-10-19 14:49:42 +00:00
2010-12-11 08:32:16 +00:00
2011-11-06 08:15:23 +00:00
2010-12-11 08:32:16 +00:00
2012-05-19 05:07:03 +00:00
2010-01-02 10:27:05 +00:00
2011-06-20 08:00:32 +00:00
2011-07-11 05:46:15 +00:00
2012-10-19 14:49:42 +00:00
2008-10-19 08:41:10 +00:00
2012-09-26 09:29:48 +00:00
2011-01-26 18:43:15 +00:00
2013-02-14 08:16:03 +00:00
2013-02-17 19:48:23 +00:00
2012-10-19 14:49:42 +00:00
2010-12-11 08:32:16 +00:00
2008-10-19 08:41:10 +00:00
2012-04-07 09:05:30 +00:00
2010-01-02 10:27:05 +00:00
2011-06-06 20:24:17 +00:00
2011-11-06 09:09:45 +00:00
2012-12-22 04:11:59 +00:00
2012-05-10 02:07:00 +00:00
2011-12-30 11:02:40 +00:00
2013-02-04 10:05:55 +00:00
2012-03-25 09:19:25 +00:00
2013-03-02 00:53:12 +00:00
2013-02-19 13:32:26 +00:00
2009-06-23 23:17:04 +00:00
2012-06-30 16:36:22 +00:00
2012-05-31 14:46:02 +00:00
2012-11-15 00:51:57 +00:00
2011-11-06 18:49:41 +00:00
2012-09-14 17:50:42 +00:00
2012-05-17 11:10:13 +00:00
2011-06-18 13:56:33 +00:00
2011-10-14 07:26:20 +00:00
2012-12-03 21:49:37 +00:00
2008-10-19 08:41:10 +00:00
2008-10-19 08:41:10 +00:00
2012-09-14 21:28:56 +00:00
2012-05-10 02:07:00 +00:00
2012-11-17 23:52:38 +00:00
2012-12-10 02:26:01 +00:00
2012-10-22 03:07:05 +00:00
2012-03-29 05:02:12 +00:00
2012-10-19 14:29:03 +00:00
2012-06-11 16:18:39 +00:00
2011-12-30 10:59:15 +00:00
2010-12-11 08:32:16 +00:00
2011-11-06 08:15:59 +00:00
2010-12-11 08:32:16 +00:00
2010-01-02 10:27:05 +00:00
2011-10-16 08:04:43 +00:00
2013-01-01 18:25:14 +00:00
2013-02-15 23:59:57 +00:00
2012-12-03 19:27:31 +00:00
2012-06-20 23:53:36 +00:00
2013-01-16 23:20:24 +00:00
2012-10-19 22:21:01 +00:00
2010-12-11 08:32:16 +00:00
2012-06-21 21:47:08 +00:00
2012-11-15 15:06:12 +00:00
2012-11-14 18:51:12 +00:00
2011-02-25 00:04:39 +00:00
2010-12-11 08:32:16 +00:00
2012-09-11 16:32:31 +00:00
2011-02-25 00:04:39 +00:00
2010-12-11 08:32:16 +00:00
2012-05-22 16:33:10 +00:00
2010-12-11 08:32:16 +00:00
2012-11-18 16:34:06 +00:00
2012-03-25 19:34:05 +00:00
2011-05-13 09:55:48 +00:00
2012-10-22 03:07:05 +00:00
2011-12-17 02:23:30 +00:00
2010-10-19 00:01:53 +00:00
2012-10-19 14:49:42 +00:00
2012-09-14 17:50:42 +00:00
2012-05-10 02:07:00 +00:00
2013-02-19 13:17:16 +00:00
2013-02-08 14:14:00 +00:00
2010-06-02 10:20:23 +00:00
2012-12-02 01:25:19 +00:00
2011-02-26 11:20:51 +00:00
2011-10-14 07:28:39 +00:00
2010-12-11 08:32:16 +00:00
2010-01-02 10:27:05 +00:00
2011-07-16 11:20:54 +00:00
2010-01-02 10:27:05 +00:00
2010-01-02 10:27:05 +00:00
2010-01-02 10:27:05 +00:00
2010-12-11 08:32:16 +00:00
2012-05-26 17:10:16 +00:00
2012-11-27 16:23:12 +00:00
2011-11-06 18:49:53 +00:00
2013-02-08 19:39:15 +00:00
2010-05-01 22:10:45 +00:00
2010-03-11 12:18:52 +00:00
2012-11-18 16:33:51 +00:00
2010-12-11 08:32:16 +00:00
2012-12-18 21:02:38 +00:00
2013-03-02 21:11:30 +00:00
2011-11-06 08:16:29 +00:00
2012-12-04 09:02:49 +00:00
2010-12-11 08:32:16 +00:00
2010-12-11 08:32:16 +00:00
2010-01-02 10:27:05 +00:00
2012-10-19 14:49:42 +00:00
2012-10-19 14:49:42 +00:00
2012-08-18 16:14:50 +00:00
2011-11-06 08:16:35 +00:00
2012-06-11 16:18:39 +00:00
2010-12-11 08:32:16 +00:00
2011-11-06 08:16:41 +00:00
2011-11-06 08:16:47 +00:00
2011-11-06 08:16:53 +00:00
2011-11-06 08:16:59 +00:00
2012-10-26 15:56:28 +00:00
2012-03-29 05:02:12 +00:00
2012-11-18 16:33:51 +00:00
2012-03-25 09:19:25 +00:00
2010-12-11 08:32:16 +00:00
2011-05-24 06:56:40 +00:00
2010-01-02 10:27:05 +00:00
2012-06-27 23:26:32 +00:00
2013-01-27 19:50:24 +00:00
2012-01-10 02:55:43 +00:00
2012-11-13 13:06:57 +00:00
2012-10-19 14:49:42 +00:00
2013-01-14 11:06:50 +00:00
2011-10-16 09:09:33 +00:00
2013-02-25 17:32:10 +00:00
2008-10-19 08:41:10 +00:00
2013-01-08 22:14:45 +00:00
2012-09-14 17:50:42 +00:00
2012-07-28 06:38:44 +00:00
2011-11-06 08:17:29 +00:00
2012-02-11 16:34:03 +00:00
2010-01-02 10:27:05 +00:00
2012-10-19 14:49:42 +00:00
2012-12-08 17:41:39 +00:00
2012-12-08 22:16:36 +00:00
2012-11-19 08:03:40 +00:00
2012-06-10 14:26:51 +00:00
2010-12-11 08:32:16 +00:00
2013-01-22 05:39:34 +00:00
2010-12-11 08:32:16 +00:00
2010-03-03 19:25:28 +00:00
2013-02-26 19:46:59 +00:00
2012-10-19 14:49:42 +00:00
2011-11-06 08:17:47 +00:00
2010-12-11 08:32:16 +00:00
2013-01-06 03:08:27 +00:00
2011-11-06 08:17:59 +00:00
2011-11-06 08:18:05 +00:00
2012-03-25 09:19:25 +00:00
2011-11-06 08:18:11 +00:00
2012-03-26 15:18:14 +00:00
2010-12-11 08:32:16 +00:00
2012-10-07 20:01:41 +00:00
2011-11-06 08:18:23 +00:00
2012-06-05 03:14:39 +00:00
2012-09-14 17:50:42 +00:00
2010-12-11 08:32:16 +00:00
2012-10-26 15:21:23 +00:00
2013-02-16 20:17:31 +00:00
2012-03-26 15:18:14 +00:00
2010-01-02 10:27:05 +00:00
2011-11-06 08:18:42 +00:00
2013-01-28 12:58:37 +00:00
2013-01-19 00:21:55 +00:00
2012-10-22 03:07:05 +00:00
2011-11-06 08:19:00 +00:00
2010-12-11 08:32:16 +00:00
2011-12-30 10:59:15 +00:00
2011-11-06 18:50:26 +00:00
2012-10-07 20:01:41 +00:00
2012-05-10 02:07:00 +00:00
2012-02-13 14:40:15 +00:00
2013-01-05 00:23:58 +00:00
2013-02-14 08:32:07 +00:00
2012-09-09 07:23:15 +00:00
2011-11-06 18:50:39 +00:00
2010-10-11 21:16:50 +00:00
2011-10-16 08:04:43 +00:00
2012-05-21 13:31:26 +00:00
2012-09-17 23:04:15 +00:00
2010-01-02 10:27:05 +00:00
2010-01-02 10:27:05 +00:00
2010-06-19 16:24:55 +00:00
2013-02-09 18:14:26 +00:00
2012-10-18 12:04:56 +00:00
2010-09-13 02:23:03 +00:00
2012-10-18 12:04:56 +00:00
2012-10-18 12:04:56 +00:00
2010-01-02 10:27:05 +00:00
2012-10-18 12:04:56 +00:00
2012-10-18 12:04:56 +00:00
7493f24ee6