From owner-freebsd-arch@FreeBSD.ORG  Wed Feb 13 23:02:54 2013
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: freebsd-arch@FreeBSD.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 5EDA7FBB
 for <freebsd-arch@FreeBSD.org>; Wed, 13 Feb 2013 23:02:54 +0000 (UTC)
 (envelope-from pawel@dawidek.net)
Received: from mail.dawidek.net (garage.dawidek.net [91.121.88.72])
 by mx1.freebsd.org (Postfix) with ESMTP id 22402660
 for <freebsd-arch@FreeBSD.org>; Wed, 13 Feb 2013 23:02:53 +0000 (UTC)
Received: from localhost (89-73-195-149.dynamic.chello.pl [89.73.195.149])
 by mail.dawidek.net (Postfix) with ESMTPSA id 2F8AC444
 for <freebsd-arch@FreeBSD.org>; Thu, 14 Feb 2013 00:00:03 +0100 (CET)
Date: Thu, 14 Feb 2013 00:03:54 +0100
From: Pawel Jakub Dawidek <pjd@FreeBSD.org>
To: freebsd-arch@FreeBSD.org
Subject: bindat(2) and connectat(2) syscalls for review.
Message-ID: <20130213230354.GC1375@garage.freebsd.pl>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature"; boundary="f0KYrhQ4vYSV2aJu"
Content-Disposition: inline
X-OS: FreeBSD 10.0-CURRENT amd64
User-Agent: Mutt/1.5.21 (2010-09-15)
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Discussion related to FreeBSD architecture <freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-arch>,
 <mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
 <mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Feb 2013 23:02:54 -0000


--f0KYrhQ4vYSV2aJu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi.

I'd like to commit the following patch:

	http://people.freebsd.org/~pjd/patches/bindconnectat.patch

It implements bindat(2) and connectat(2) syscalls that will allow to
manage UNIX domain sockets from within capability mode sandbox.

They work just like any other *at(2) syscall and their prototypes look
like this:

	int bindat(int fd, int s, const struct sockaddr *addr, socklen_t addrlen);
	int connectat(int fd, int s, const struct sockaddr *addr, socklen_t addrle=
n);

Where 'fd' is directory descriptor. The only supported socket domain is
PF_LOCAL.

The audit subsystem was updated to audit the new syscalls properly.

Comments and reviews are welcome.

--=20
Pawel Jakub Dawidek                       http://www.wheelsystems.com
FreeBSD committer                         http://www.FreeBSD.org
Am I Evil? Yes, I Am!                     http://tupytaj.pl

--f0KYrhQ4vYSV2aJu
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)

iEYEARECAAYFAlEcG9oACgkQForvXbEpPzSafwCeJt4l+7hgI+/vcOVGHc+IcFLK
0+UAniSVf8RM8oduMjxkhLiUy+A48/4U
=D1Fx
-----END PGP SIGNATURE-----

--f0KYrhQ4vYSV2aJu--