| #
314560 |
|
02-Mar-2017 |
emaste |
MFC r309649 (oshogbo): tcpdump: allow to use BIOCROTZBUF in capability mode
The libpcap library can use a BIOCROTZBUF ioctl when net.bpf.zerocopy_enable
sysctl is set.
PR: 217490
|
| #
285665 |
|
17-Jul-2015 |
pkelsey |
MFC r285275 (only the part that fixes PR 199568):
Obtain proper capsicum rights for dump files so rotation of such files works when requested. This is equivalent to cherry picking the following upstream commits:
commit c6d472bf63488b0c2ab7ab9f4b32c68dd2c8ea2b
commit f08eb851eedf9775e6485ab75c0d8cf8d1306be6
commit d83a284abc80d3d09f6bddd087760bb1b01d9cc7
PR: 199568
Approved by: re
|
| #
283583 |
|
26-May-2015 |
luigi |
MFC: 272451, 272653 add CAP_EVENT so that we can poll() on netmap and pcap
file descriptors
|
| #
283122 |
|
19-May-2015 |
brooks |
MFC r282436 (the portion that makes sense):
Remove "capability mode sandbox enabled" messages.
These messages serve little purpose and break some consumers.
PR: 199855
Differential Revision: https://reviews.freebsd.org/D2440
Reviewed by: rwatson
Approved by: pjd
Sponsored by: DARPA, AFRL
|
| #
280250 |
|
19-Mar-2015 |
rwatson |
Merge an applicable subset of r263234 from HEAD to stable/10:
Update most userspace consumers of capability.h to use capsicum.h instead.
auditdistd is not updated as I will make the change upstream and then do a
vendor import sometime in the next week or two.
Note that a significant fraction does not apply, as FreeBSD 10 doesn't
contain a Capsicumised ping, casperd, libcasper, etc. When these features
are merged, the capsicum.h change will need to be merged with them.
Sponsored by: Google, Inc.
|
| #
285665 |
|
17-Jul-2015 |
pkelsey |
MFC r285275 (only the part that fixes PR 199568):
Obtain proper capsicum rights for dump files so rotation of such files works when requested. This is equivalent to cherry picking the following upstream commits:
commit c6d472bf63488b0c2ab7ab9f4b32c68dd2c8ea2b
commit f08eb851eedf9775e6485ab75c0d8cf8d1306be6
commit d83a284abc80d3d09f6bddd087760bb1b01d9cc7
PR: 199568
Approved by: re
|
| #
283583 |
|
26-May-2015 |
luigi |
MFC: 272451, 272653 add CAP_EVENT so that we can poll() on netmap and pcap
file descriptors
|
| #
283122 |
|
19-May-2015 |
brooks |
MFC r282436 (the portion that makes sense):
Remove "capability mode sandbox enabled" messages.
These messages serve little purpose and break some consumers.
PR: 199855
Differential Revision: https://reviews.freebsd.org/D2440
Reviewed by: rwatson
Approved by: pjd
Sponsored by: DARPA, AFRL
|
| #
280250 |
|
19-Mar-2015 |
rwatson |
Merge an applicable subset of r263234 from HEAD to stable/10:
Update most userspace consumers of capability.h to use capsicum.h instead.
auditdistd is not updated as I will make the change upstream and then do a
vendor import sometime in the next week or two.
Note that a significant fraction does not apply, as FreeBSD 10 doesn't
contain a Capsicumised ping, casperd, libcasper, etc. When these features
are merged, the capsicum.h change will need to be merged with them.
Sponsored by: Google, Inc.
|