Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Feb 2013 01:20:04 +0200
From:      Konstantin Belousov <kostikbel@gmail.com>
To:        Pawel Jakub Dawidek <pjd@FreeBSD.org>
Cc:        freebsd-arch@FreeBSD.org
Subject:   Re: bindat(2) and connectat(2) syscalls for review.
Message-ID:  <20130213232004.GA2522@kib.kiev.ua>
In-Reply-To: <20130213230354.GC1375@garage.freebsd.pl>
References:  <20130213230354.GC1375@garage.freebsd.pl>

next in thread | previous in thread | raw e-mail | index | archive | help

--XVQUzBCFV/dfPXE3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Feb 14, 2013 at 12:03:54AM +0100, Pawel Jakub Dawidek wrote:
> Hi.
>=20
> I'd like to commit the following patch:
>=20
> 	http://people.freebsd.org/~pjd/patches/bindconnectat.patch
>=20
> It implements bindat(2) and connectat(2) syscalls that will allow to
> manage UNIX domain sockets from within capability mode sandbox.
>=20
> They work just like any other *at(2) syscall and their prototypes look
> like this:
>=20
> 	int bindat(int fd, int s, const struct sockaddr *addr, socklen_t addrlen=
);
> 	int connectat(int fd, int s, const struct sockaddr *addr, socklen_t addr=
len);
>=20
> Where 'fd' is directory descriptor. The only supported socket domain is
> PF_LOCAL.
>=20
> The audit subsystem was updated to audit the new syscalls properly.
>=20
> Comments and reviews are welcome.

Looking only at prototypes, I think it is useful to add at last the flags
argument.  The first application of it is for O_CLOEXEC-like flag.

--XVQUzBCFV/dfPXE3
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
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=HHhn
-----END PGP SIGNATURE-----

--XVQUzBCFV/dfPXE3--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130213232004.GA2522>