From owner-p4-projects@FreeBSD.ORG Sun Mar 26 12:38:07 2006
Return-Path:
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 7A87416A42A; Sun, 26 Mar 2006 12:38:07 +0000 (UTC)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id 3408116A426
for ; Sun, 26 Mar 2006 12:38:07 +0000 (UTC)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
by mx1.FreeBSD.org (Postfix) with ESMTP id A4FC143D5D
for ; Sun, 26 Mar 2006 12:38:05 +0000 (GMT)
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k2QCc5EY095973
for ; Sun, 26 Mar 2006 12:38:05 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k2QCc53o095970
for perforce@freebsd.org; Sun, 26 Mar 2006 12:38:05 GMT
(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 26 Mar 2006 12:38:05 GMT
Message-Id: <200603261238.k2QCc53o095970@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 94046 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 26 Mar 2006 12:38:07 -0000
http://perforce.freebsd.org/chv.cgi?CH=94046
Change 94046 by rwatson@rwatson_peppercorn on 2006/03/26 12:37:22
More information on what POSIX.1e privileges do.
Affected files ...
.. //depot/projects/trustedbsd/www/cap.page#2 edit
Differences ...
==== //depot/projects/trustedbsd/www/cap.page#2 (text+ko) ====
@@ -29,7 +29,7 @@
- $P4: //depot/projects/trustedbsd/www/cap.page#1 $
+ $P4: //depot/projects/trustedbsd/www/cap.page#2 $
@@ -44,10 +44,14 @@
p4-cvs-trustedbsd-cap
- POSIX.1e breaks down root privilege into a set of capabilities, or
- more strictly, privileges, which allow the meeting of specific
+
POSIX.1e breaks root privilege into a set of capabilities, or
+ more strictly, privileges, which allow the granting of specific
privilege requirements for POSIX calls, such as setuid().
- The TrustedBSD capability project is currently inactive, but an
+ POSIX.1e defines extension to process and file state to allow
+ privileges to be granted to processes, either by inheritence or
+ a file privilege model similar to setuid/setgid.
+
+ The TrustedBSD capability project is currently inactive, but an
implementation of POSIX.1e capabilities for an older FreeBSD release
is available and functional, and may be found in Perforce/cvsup.
Certain key files are provided in a tarball for download on this