manuals: Fix "skipping end of block" .Ed errorsThese were reported by `mandoc -T lint ...` as errors; this commit onlyhandles unnecessary .Ed commands.The rendered output (in ascii and html) is
manuals: Fix "skipping end of block" .Ed errorsThese were reported by `mandoc -T lint ...` as errors; this commit onlyhandles unnecessary .Ed commands.The rendered output (in ascii and html) is not affected by this commit.Signed-off-by: Graham Percival <gperciva@tarsnap.com>Reviewed by: mhorneMFC after: 3 daysSponsored by: Tarsnap Backup Inc.Pull Request: https://github.com/freebsd/freebsd-src/pull/1435
show more ...
Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix
libcapsicum: cache more time zone informationThe functions like gmtime(3) expect to cache a GMT time zone. Somesandboxed programs (like last(1)) use the gmtime(3) function.In case of last(1), thi
libcapsicum: cache more time zone informationThe functions like gmtime(3) expect to cache a GMT time zone. Somesandboxed programs (like last(1)) use the gmtime(3) function.In case of last(1), this function fails to load a proper time zonebecause it is called after entering the capability mode._open () at _open.S:40x00000008011bc5a8 in tzloadbody (name=0x8018b9580 "/usr/share/zoneinfo/Etc/UTC", sp=0x801870140,tzload (name=<optimized out>, sp=0x801870140, doextend=true)0x00000008011bb8ba in gmtload (sp=0x801870140) at /usr/src/contrib/tzcode/localtime.c:1456gmtcheck () at /usr/src/contrib/tzcode/localtime.c:15810x000000080111f85a in _libc_once (once_control=0x80127c550, init_routine=0x0)_once (once_control=0x80127c550, init_routine=0x0) at /usr/src/lib/libc/gen/_once_stub.c:630x00000008011bb9d0 in gmtime_r (timep=0x7fffffffe3a8, tmp=0x80127c568)gmtime (timep=timep@entry=0x7fffffffe3a8) at /usr/src/contrib/tzcode/localtime.c:18650x0000000001024cd4 in printentry (bp=bp@entry=0x8018b4800, tt=tt@entry=0x80186a0a0)0x00000000010245ae in doentry (bp=0x8018b4800)0x00000000010243a7 in main (argc=1, argv=<optimized out>)This time zone is not loaded by the tzset(3) function. Because ofthat, extend the caph_cache_tzdata(3) function to also include theGMT time zone. There is no other way to cache this data thancalling gmtime(3) once.MFC after: 5 daysReviewed by: emaste, markjDifferential Revision: https://reviews.freebsd.org/D45297
libcapsicum: document return valuesReviewed by: emasteRequested by: desDifferential Revision: https://reviews.freebsd.org/D45222
Remove $FreeBSD$: two-line nroff patternRemove /^\.\\"\n\.\\"\s*\$FreeBSD\$$\n/
Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Remove $FreeBSD$: two-line .h patternRemove /^\s*\*\n \*\s+\$FreeBSD\$$\n/
Add missing FreeBSD functions to -legacy when building on macOS/LinuxIn most cases this simply builds the file from lib/libc for missingfunctions (e.g. strlcpy on Linux etc.). In cases where this
Add missing FreeBSD functions to -legacy when building on macOS/LinuxIn most cases this simply builds the file from lib/libc for missingfunctions (e.g. strlcpy on Linux etc.). In cases where this is not possibleI've added an implementation to tools/build/cross-build.The fgetln.c/fgetwln.c/closefrom.c compatibility code was obtained fromhttps://gitlab.freedesktop.org/libbsd/libbsd, but I'm not sure it makessense to import it into to contrib just for these three bootstrap files.Reviewed By: brooksDifferential Revision: https://reviews.freebsd.org/D25978
capsicum_helpers: split stream cap bits out of caph_limit_stream()The goal here is to make it so applications can take the rights one wouldnormally get by calling caph_limit_stream() on a descript
capsicum_helpers: split stream cap bits out of caph_limit_stream()The goal here is to make it so applications can take the rights one wouldnormally get by calling caph_limit_stream() on a descriptor and build onthem as needed.The tentatively planned use-case is an application that takes a socket andhooks it up to std{err,out,in} for a fork()d child. It may be feasible toapply limitations to such descriptors as long as it's a superset of thosenormally applied to stdio.Reviewed by: markj, oshobo (prior version; sans manpage addition)Differential Revision: https://reviews.freebsd.org/D22993
pkgbase: Create a FreeBSD-utilities package and make it the default oneThe default package use to be FreeBSD-runtime but it should only containbinaries and libs enough to boot to single user and r
pkgbase: Create a FreeBSD-utilities package and make it the default oneThe default package use to be FreeBSD-runtime but it should only containbinaries and libs enough to boot to single user and repair the system, itis also very handy to have a package that can be tranform to a small mfsroot.So create a new package named FreeBSD-utilities and make it the default one.Also move a few binaries and lib into this package when it make sense.Reviewed by: bapt, gjbDifferential Revision: https://reviews.freebsd.org/D21506
List caph_limit_stream() in the synopsis.Fix typos while here.MFC after: 1 weekSponsored by: The FreeBSD Foundation
libcapsicum: add missing linksReported by: manu
Fix a recusive call introduce in the r340130.
libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limitThe idea behind those functions is not to force consumers to remember that thereis a need to check errno on failure. We already have a caph_
libcapsicum: Introduce caph_{rights,ioctls,fcntls}_limitThe idea behind those functions is not to force consumers to remember that thereis a need to check errno on failure. We already have a caph_enter(3) functionwhich does the same for cap_enter(2).MFC after: 2 weeks
Fix description.
Fix declaration.
With r335636 C++ program use libcasper.h and capsicum_helpers.h.Add __BEGIN_DECLS and __END_DECLS to those headers.
libcapsicum: adding missing man page links
Introduce caph_enter and caph_enter_casper.The caph_enter function should made it easier to sandbox applicationand not force us to remember that we need to check errno on failure.Another function
Introduce caph_enter and caph_enter_casper.The caph_enter function should made it easier to sandbox applicationand not force us to remember that we need to check errno on failure.Another function is also checking if casper is present.Reviewed by: emaste, cem (partially)Differential Revision: https://reviews.freebsd.org/D14557
capsicum_helpers: Add EVENT to default stdio rights setWithout it, calling caph_limit_stdio(3) breaks Irssi.Reviewed by: oshogboMFC after: 2 weeksSponsored by: DARPA, AFRLDifferential Revision
capsicum_helpers: Add EVENT to default stdio rights setWithout it, calling caph_limit_stdio(3) breaks Irssi.Reviewed by: oshogboMFC after: 2 weeksSponsored by: DARPA, AFRLDifferential Revision: https://reviews.freebsd.org/D12622
capsicum_helpers: Add SEEK to default stdio rights setPR: 219173Sponsored by: Dell EMC Isilon
capsicum_helpers: Add FIODTYPE to default ioctls allowedFIODTYPE will be needed by hexdump(1) to speed up the -s flag on devicesthat should be able to support fseek(3); specifically, in an attempt
capsicum_helpers: Add FIODTYPE to default ioctls allowedFIODTYPE will be needed by hexdump(1) to speed up the -s flag on devicesthat should be able to support fseek(3); specifically, in an attempt tocorrect for the fact that most tape drives don't support seeking yet don'tindicate as such when fseeko(3) is invoked. Related: D10939Reviewed by: cem, emaste, oshogboApproved by: emaste (mentor)Differential Revision: https://reviews.freebsd.org/D10937
capsicum_helpers: Add LOOKUP flagAdd a helper routine for opening a directory that is restricted to beingused for opening relative files as stdio streams.I think this will really help basic adap
capsicum_helpers: Add LOOKUP flagAdd a helper routine for opening a directory that is restricted to beingused for opening relative files as stdio streams.I think this will really help basic adaptation of multi-file programs toCapsicum. Rather than having each program initialize a rights object andioctl/fcntl arrays for their root fd for relative opens, consolidate in thelogical place.Reviewed by: oshogbo@Sponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D8743
capsicum_helpers: Squash errors from closed fdsSquash EBADF from closed stdin, stdout, or stderr in caph_limit_stdio().Any program used during special shell scripts may commonly be forkedfrom a p
capsicum_helpers: Squash errors from closed fdsSquash EBADF from closed stdin, stdout, or stderr in caph_limit_stdio().Any program used during special shell scripts may commonly be forkedfrom a parent process with closed standard stream. Do the common sensething for this common use.Reported by: Iblis Lin <iblis AT hs.ntnu.edu.tw>Reviewed by: oshogbo@ (earlier version)Sponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D8657
DIRDEPS_BUILD: Connect new dependencies.MFC after: 2 weeksSponsored by: Dell EMC Isilon
123