X-List-Received-Date: Sun, 26 Mar 2006 12:38:07 -0000
http://perforce.freebsd.org/chv.cgi?CH=94046
Change 94046 by rwatson@rwatson_peppercorn on 2006/03/26 12:37:22
More information on what POSIX.1e privileges do.
Affected files ...
.. //depot/projects/trustedbsd/www/cap.page#2 edit
Differences ...
==== //depot/projects/trustedbsd/www/cap.page#2 (text+ko) ====
@@ -29,7 +29,7 @@
- $P4: //depot/projects/trustedbsd/www/cap.page#1 $
+ $P4: //depot/projects/trustedbsd/www/cap.page#2 $
@@ -44,10 +44,14 @@
p4-cvs-trustedbsd-cap
- POSIX.1e breaks down root privilege into a set of capabilities, or
- more strictly, privileges, which allow the meeting of specific
+
POSIX.1e breaks root privilege into a set of capabilities, or
+ more strictly, privileges, which allow the granting of specific
privilege requirements for POSIX calls, such as setuid().
- The TrustedBSD capability project is currently inactive, but an
+ POSIX.1e defines extension to process and file state to allow
+ privileges to be granted to processes, either by inheritence or
+ a file privilege model similar to setuid/setgid.
+
+ The TrustedBSD capability project is currently inactive, but an
implementation of POSIX.1e capabilities for an older FreeBSD release
is available and functional, and may be found in Perforce/cvsup.
Certain key files are provided in a tarball for download on this
From owner-p4-projects@FreeBSD.ORG Sun Mar 26 13:28:29 2006
Return-Path:
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id B7FCA16A423; Sun, 26 Mar 2006 13:28:29 +0000 (UTC)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id 7E88116A422
for ; Sun, 26 Mar 2006 13:28:29 +0000 (UTC)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
by mx1.FreeBSD.org (Postfix) with ESMTP id 668E543D5D
for ; Sun, 26 Mar 2006 13:28:28 +0000 (GMT)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k2QDSSdL005667
for ; Sun, 26 Mar 2006 13:28:28 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k2QDSS3p005664
for perforce@freebsd.org; Sun, 26 Mar 2006 13:28:28 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 26 Mar 2006 13:28:28 GMT
Message-Id: <200603261328.k2QDSS3p005664@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 94049 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 26 Mar 2006 13:28:29 -0000
http://perforce.freebsd.org/chv.cgi?CH=94049
Change 94049 by rwatson@rwatson_peppercorn on 2006/03/26 13:28:04
Add simple tar script to tar up some pertinent capability files for
people who are interested.
Affected files ...
.. //depot/projects/trustedbsd/cap/tar.sh#1 add
Differences ...
From owner-p4-projects@FreeBSD.ORG Sun Mar 26 13:30:34 2006
Return-Path:
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 0815216A430; Sun, 26 Mar 2006 13:30:34 +0000 (UTC)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id C298D16A42D
for ; Sun, 26 Mar 2006 13:30:33 +0000 (UTC)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
by mx1.FreeBSD.org (Postfix) with ESMTP id 6131343D60
for ; Sun, 26 Mar 2006 13:30:31 +0000 (GMT)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k2QDUVt1005826
for ; Sun, 26 Mar 2006 13:30:31 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k2QDUVCp005823
for perforce@freebsd.org; Sun, 26 Mar 2006 13:30:31 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 26 Mar 2006 13:30:31 GMT
Message-Id: <200603261330.k2QDUVCp005823@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 94050 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 26 Mar 2006 13:30:34 -0000
http://perforce.freebsd.org/chv.cgi?CH=94050
Change 94050 by rwatson@rwatson_peppercorn on 2006/03/26 13:29:44
Fix sh script.
Affected files ...
.. //depot/projects/trustedbsd/cap/tar.sh#2 edit
Differences ...
==== //depot/projects/trustedbsd/cap/tar.sh#2 (text+ko) ====
@@ -1,10 +1,3 @@
-FILES= sys/sys/capability.h \
- sys/kern/kern_prot.c \
- sys/kern/kern_cap.c \
- lib/libc/posix1e \
- etc/capability
- usr.sbin/getpcap \
- usr.sbin/getfcap \
- usr.sbin/setfcap
+FILES="sys/sys/capability.h sys/kern/kern_prot.c sys/kern/kern_cap.c lib/libc/posix1e etc/capability usr.sbin/getpcap usr.sbin/getfcap usr.sbin/setfcap"
tar -czf 20060326-cap.tgz ${FILES}
From owner-p4-projects@FreeBSD.ORG Sun Mar 26 13:32:34 2006
Return-Path:
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id B54E416A41F; Sun, 26 Mar 2006 13:32:34 +0000 (UTC)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id 7C3DF16A400
for ; Sun, 26 Mar 2006 13:32:34 +0000 (UTC)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
by mx1.FreeBSD.org (Postfix) with ESMTP id 442D243D45
for ; Sun, 26 Mar 2006 13:32:34 +0000 (GMT)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k2QDWYDR005927
for ; Sun, 26 Mar 2006 13:32:34 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k2QDWXUC005924
for perforce@freebsd.org; Sun, 26 Mar 2006 13:32:33 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 26 Mar 2006 13:32:33 GMT
Message-Id: <200603261332.k2QDWXUC005924@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 94051 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 26 Mar 2006 13:32:34 -0000
http://perforce.freebsd.org/chv.cgi?CH=94051
Change 94051 by rwatson@rwatson_peppercorn on 2006/03/26 13:32:04
Add more things to tarball.
Affected files ...
.. //depot/projects/trustedbsd/cap/tar.sh#3 edit
Differences ...
==== //depot/projects/trustedbsd/cap/tar.sh#3 (text+ko) ====
@@ -1,3 +1,3 @@
-FILES="sys/sys/capability.h sys/kern/kern_prot.c sys/kern/kern_cap.c lib/libc/posix1e etc/capability usr.sbin/getpcap usr.sbin/getfcap usr.sbin/setfcap"
+FILES="sys/sys/capability.h sys/kern/kern_prot.c sys/kern/kern_cap.c lib/libc/posix1e etc/capability usr.sbin/getpcap usr.sbin/getfcap usr.sbin/setfcap bin/sh/cap.c share/man/man5/capability.5 lib/libc_r/uthread/*cap*"
tar -czf 20060326-cap.tgz ${FILES}
From owner-p4-projects@FreeBSD.ORG Sun Mar 26 13:34:42 2006
Return-Path:
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 0839216A45D; Sun, 26 Mar 2006 13:34:42 +0000 (UTC)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id D9C7716A45A
for ; Sun, 26 Mar 2006 13:34:41 +0000 (UTC)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
by mx1.FreeBSD.org (Postfix) with ESMTP id 9792643D75
for ; Sun, 26 Mar 2006 13:34:37 +0000 (GMT)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k2QDYbYo005995
for ; Sun, 26 Mar 2006 13:34:37 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k2QDYbeP005992
for perforce@freebsd.org; Sun, 26 Mar 2006 13:34:37 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 26 Mar 2006 13:34:37 GMT
Message-Id: <200603261334.k2QDYbeP005992@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 94053 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 26 Mar 2006 13:34:42 -0000
http://perforce.freebsd.org/chv.cgi?CH=94053
Change 94053 by rwatson@rwatson_fledge on 2006/03/26 13:34:25
Add 20060326 cap tarball download for people looking for
BSD-licensed POSIX.1e files. These are from a very early 6.0
POSIX.1e capability snapshot found in the trustedbsd_cap branch.
Affected files ...
.. //depot/projects/trustedbsd/www/cap.page#3 edit
Differences ...
==== //depot/projects/trustedbsd/www/cap.page#3 (text+ko) ====
@@ -6,10 +6,10 @@
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
- notice, this list of conditions and the following disclaimer.
+ notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
- notice, this list of conditions and the following disclaimer in the
- documentation and/or other materials provided with the distribution.
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
@@ -29,7 +29,7 @@
- $P4: //depot/projects/trustedbsd/www/cap.page#2 $
+ $P4: //depot/projects/trustedbsd/www/cap.page#3 $
@@ -74,6 +74,9 @@
MAC modules to deny privilege based on the POSIX.1e privilege
categories.
+ 2006-03-26 FreeBSD 5.0 POSIX.1e capability reference files
+ snapshot Download.
+