Date: Mon, 21 Mar 2011 21:31:50 +0000 (UTC) From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sbin/hastctl hastctl.c src/sbin/hastd primary.c secondary.c subr.c subr.h Message-ID: <201103212132.p2LLW7Cv010711@repoman.freebsd.org>
index | next in thread | raw e-mail
pjd 2011-03-21 21:31:50 UTC
FreeBSD src repository
Modified files:
sbin/hastctl hastctl.c
sbin/hastd primary.c secondary.c subr.c subr.h
Log:
SVN rev 219847 on 2011-03-21 21:31:50Z by pjd
When dropping privileges prefer capsicum over chroot+setgid+setuid.
We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).
X-MFC after: capsicum is merged to stable/8
Revision Changes Path
1.10 +1 -2 src/sbin/hastctl/hastctl.c
1.62 +1 -1 src/sbin/hastd/primary.c
1.32 +1 -1 src/sbin/hastd/secondary.c
1.6 +15 -1 src/sbin/hastd/subr.c
1.4 +1 -1 src/sbin/hastd/subr.h
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201103212132.p2LLW7Cv010711>