pjd b84a0251e3 When dropping privileges prefer capsicum over chroot+setgid+setuid. ...

We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).

X-MFC after:	capsicum is merged to stable/8

2011-03-21 21:31:50 +00:00

..

activemap.c

…

activemap.h

…

control.c

Remove stale comment. Yes, it is valid to set role back to init.

2011-03-21 15:08:10 +00:00

control.h

Don't open configuration file from worker process. Handle SIGHUP in the

2011-01-24 15:04:15 +00:00

crc32.c

Allow to checksum on-the-wire data using either CRC32 or SHA256.

2011-03-06 22:56:14 +00:00

crc32.h

Allow to checksum on-the-wire data using either CRC32 or SHA256.

2011-03-06 22:56:14 +00:00

ebuf.c

Fix typos.

2010-06-14 21:44:58 +00:00

ebuf.h

…

event.c

Forgot to add event.c and event.h in r212038.

2010-08-31 09:38:43 +00:00

event.h

Forgot to add event.c and event.h in r212038.

2010-08-31 09:38:43 +00:00

hast_checksum.c

Allow to checksum on-the-wire data using either CRC32 or SHA256.

2011-03-06 22:56:14 +00:00

hast_checksum.h

Allow to checksum on-the-wire data using either CRC32 or SHA256.

2011-03-06 22:56:14 +00:00

hast_compression.c

Allow to compress on-the-wire data using two algorithms:

2011-03-06 23:09:33 +00:00

hast_compression.h

Allow to compress on-the-wire data using two algorithms:

2011-03-06 23:09:33 +00:00

hast_proto.c

Allow to compress on-the-wire data using two algorithms:

2011-03-06 23:09:33 +00:00

hast_proto.h

Constify arguments we can constify.

2010-08-30 22:26:42 +00:00

hast.conf.5

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

hast.h

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

hastd.8

mdoc: move remaining sections into consistent order

2010-05-13 12:08:11 +00:00

hastd.c

Before handling any events on descriptors check signals so we can update

2011-03-21 15:29:20 +00:00

hastd.h

Add function to assert that the only descriptors we have open are the ones

2011-01-28 21:56:47 +00:00

hooks.c

Increase debug level of "Checking hooks." message.

2011-03-21 14:53:27 +00:00

hooks.h

hook_check() is now only used to report about long-running hooks, so the

2010-10-04 21:43:06 +00:00

lzf.c

Allow to compress on-the-wire data using two algorithms:

2011-03-06 23:09:33 +00:00

lzf.h

Allow to compress on-the-wire data using two algorithms:

2011-03-06 23:09:33 +00:00

Makefile

- Turn on printf extentions.

2011-03-07 10:38:18 +00:00

metadata.c

Plug memory leaks.

2010-06-14 21:25:20 +00:00

metadata.h

…

nv.c

Add nv_assert() which allows to assert that the given name exists.

2011-01-22 22:38:18 +00:00

nv.h

Add nv_assert() which allows to assert that the given name exists.

2011-01-22 22:38:18 +00:00

parse.y

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

pjdlog.c

Unbreak the build.

2011-03-07 19:54:51 +00:00

pjdlog.h

Rename pjdlog_verify() to pjdlog_abort() as it better describes what the

2011-01-31 15:52:00 +00:00

primary.c

When dropping privileges prefer capsicum over chroot+setgid+setuid.

2011-03-21 21:31:50 +00:00

proto_common.c

Remove #include needed for debugging.

2011-03-15 13:53:39 +00:00

proto_impl.h

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

proto_socketpair.c

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

proto_tcp4.c

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

proto_uds.c

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

proto.c

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

proto.h

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00

rangelock.c

…

rangelock.h

…

secondary.c

When dropping privileges prefer capsicum over chroot+setgid+setuid.

2011-03-21 21:31:50 +00:00

subr.c

When dropping privileges prefer capsicum over chroot+setgid+setuid.

2011-03-21 21:31:50 +00:00

subr.h

When dropping privileges prefer capsicum over chroot+setgid+setuid.

2011-03-21 21:31:50 +00:00

synch.h

Plug memory leaks.

2010-10-24 15:41:23 +00:00

token.l

In hast.conf we define the other node's address in 'remote' variable.

2011-03-21 08:54:59 +00:00