Date: Wed, 24 Apr 2024 13:32:42 +0200 From: Alexander Leidinger <Alexander@Leidinger.net> To: Jake Freeland <jfree@freebsd.org> Cc: src-committers@freebsd.org, dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org Subject: Re: git: f239db4800ee - main - ktrace: Remove CAPFAIL from default trace points Message-ID: <1ddb4f99cc141fa6701c0a770382af02@Leidinger.net> In-Reply-To: <202404240029.43O0T4jF051386@gitrepo.freebsd.org> References: <202404240029.43O0T4jF051386@gitrepo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --=_169e9ba8f1b0b7778fba92c6a8da64f8 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Am 2024-04-24 02:29, schrieb Jake Freeland: > The branch main has been updated by jfree: > > URL: > https://cgit.FreeBSD.org/src/commit/?id=f239db4800ee9e7ff8485f96b7a68e6c38178c3b > > commit f239db4800ee9e7ff8485f96b7a68e6c38178c3b > Author: Jake Freeland <jfree@FreeBSD.org> > AuthorDate: 2024-04-24 00:26:14 +0000 > Commit: Jake Freeland <jfree@FreeBSD.org> > CommitDate: 2024-04-24 00:26:14 +0000 > > ktrace: Remove CAPFAIL from default trace points > > The CAPFAIL tracepoint was recently extended to report ECAPMODE > capability violations for processes that do not enter capability > mode. > This allows developers that are interested in Capsicumizing their > programs to determine where violations are being raised. > > Previously, CAPFAIL only produced output for processes using > Capsicum(4) > capabilties. Thus, most ktrace users never received log output from > the > trace point. With the recent changes, this is no longer the case. > > Having this trace point enabled by default will produce output for > all > processes that use syscalls that are not permitted in capability > mode. > This may lead to confusion for users that are not familiar with the > feature. Remove KTRFAC_CAPFAIL from ktrace's default points to > avoid > this. Thanks for the opt-in instead of the opt-out! I stumbled over this a few hours ago and I can confirm that I was confused at first look... until I remembered a commit message about adding more info in this regard. Bye, Alexander. -- http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF --=_169e9ba8f1b0b7778fba92c6a8da64f8 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc; size=833 Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEER9UlYXp1PSd08nWXEg2wmwP42IYFAmYo7ekACgkQEg2wmwP4 2IZhbw//eGVduCkjhH3DH0TIN2cgizofwfS3Qv8P5hqVL9XvDCJbfKulB+G75w18 cRDMT4EIOneYk5fjGIBb1uE49k6MUFbnKkuazTrObA4XNR9GJeJRp3rNb7RK8S7I WkSha00VjHkcX+PWa7syhhtdkP7SxY6ajVYPx25p32uTUfnSt/4681UNrccQh/W/ 0NNlbcFq5bQFCBH2UBZCVNIiqQGY8f5FqUDqewQBueiAazCNwip5LeQ3PMAx7ZDm KbMYNFhVyIrmKOxxEtq0tuYI+FLErmbH+vsoiNCFFTycZ1uMUdZnUxKF7zv0QJYg 5AL1eAcvjSSYoOT+lgaPM7FgCCgplNImBKj1tMPvY0fZdIrx4d3oHKW13fuULMmJ poXdtbDxEFn4k88yhkRUG4/D6Jh7r1hqB54OEC0oHaaxgxulHvXXyY8/li1nhU2s PDGKj5AwjktVb9S4i1tBGAgq7DdVbo/WAkSqCZRpz+Qcu2/BczyWY/Axf5LnppWU aZNaWLrapFa6YsomGlrHO1MLggWGR19P6Zs79KekNYb96tbuktUmQvlHyQoMHBkQ RVTDfmNsaJOIZyy4D57uydqfvlLUt+4/dGAiAcPpFACC9vyJtf0lVCV8V4QndLB0 Wwkuogf2hI6gkn9cWWZ/2H8DaaWbyQRFemF7RsyWm1vj5q8FKas= =9bda -----END PGP SIGNATURE----- --=_169e9ba8f1b0b7778fba92c6a8da64f8--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1ddb4f99cc141fa6701c0a770382af02>