pjd b84a0251e3 When dropping privileges prefer capsicum over chroot+setgid+setuid.
We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).

X-MFC after:	capsicum is merged to stable/8
2011-03-21 21:31:50 +00:00
..
2010-08-23 22:24:11 +00:00
2010-11-22 07:00:47 +00:00
2010-02-15 14:07:40 +00:00
2010-08-06 14:33:42 +00:00
2010-08-23 22:24:11 +00:00
2011-03-12 21:51:56 +00:00
2011-02-23 09:22:33 +00:00
2011-03-21 15:17:02 +00:00
2010-03-02 16:58:04 +00:00
2011-01-25 22:25:16 +00:00
2011-02-25 20:49:07 +00:00
2011-02-22 15:31:40 +00:00
2010-08-23 22:24:11 +00:00
2010-03-10 18:51:13 +00:00
2010-06-20 12:52:33 +00:00
2010-12-19 13:40:38 +00:00
2010-10-11 20:17:23 +00:00
2010-12-08 15:12:37 +00:00