Page MenuHomeFreeBSD
Differential D31349

makesyscalls.lua: add a CAPENABLED flag
ClosedPublic
Actions

Authored by brooks on Jul 29 2021, 8:59 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Oct 1, 3:10 PM
Unknown Object (File)
Tue, Oct 1, 7:18 AM
Unknown Object (File)
Tue, Oct 1, 5:16 AM
Unknown Object (File)
Tue, Oct 1, 12:16 AM
Unknown Object (File)
Sat, Sep 28, 6:36 PM
Unknown Object (File)
Fri, Sep 27, 8:37 AM
Unknown Object (File)
Thu, Sep 19, 5:17 AM
Unknown Object (File)
Mon, Sep 16, 1:23 PM
View All 85 Files
Subscribers
imp

Details

Reviewers
kevans
emaste
rwatson
Commits
rGfe388671ac85: makesyscalls.lua: add a CAPENABLED flag
rG6945df3fff57: makesyscalls.lua: add a CAPENABLED flag
Summary

The CAPENABLED flag indicates that the syscall can be used in capsicum
capability mode. It is intended to replace capabilities.conf.

MFC after: 1 week
Sponsored by: DARPA

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

brooks created this revision.Jul 29 2021, 8:59 PM
Herald added a subscriber: imp. · View Herald TranscriptJul 29 2021, 8:59 PM
brooks requested review of this revision.Jul 29 2021, 8:59 PM
Harbormaster completed remote builds in B40743: Diff 92963.Jul 29 2021, 8:59 PM
brooks added a child revision: D31350: syscalls.master: switch to CAPENABLED flags.Jul 29 2021, 8:59 PM
brooks added reviewers: kevans, emaste, rwatson.Jul 29 2021, 9:00 PM
kevans accepted this revision.Jul 29 2021, 9:07 PM

I would have perhaps preferred the CAPENABLED descriptive bits at the top of syscalls.master included with this one instead, but the implementation LGTM.

This revision is now accepted and ready to land.Jul 29 2021, 9:07 PM
emaste accepted this revision.Aug 4 2021, 2:52 PM
brooks updated this revision to Diff 94502.Sep 1 2021, 6:06 PM
  • Move syscalls.master documentation update here
This revision now requires review to proceed.Sep 1 2021, 6:06 PM
Harbormaster completed remote builds in B41314: Diff 94502.Sep 1 2021, 6:06 PM
kevans accepted this revision.Sep 1 2021, 6:09 PM
This revision is now accepted and ready to land.Sep 1 2021, 6:09 PM
kevans added a comment.Sep 1 2021, 6:09 PM

Thanks!

brooks mentioned this in D31350: syscalls.master: switch to CAPENABLED flags.Sep 1 2021, 6:11 PM
emaste accepted this revision.Sep 1 2021, 6:52 PM
Closed by commit rG6945df3fff57: makesyscalls.lua: add a CAPENABLED flag (authored by brooks). · Explain WhySep 1 2021, 9:00 PM
This revision was automatically updated to reflect the committed changes.
brooks added a commit: rG6945df3fff57: makesyscalls.lua: add a CAPENABLED flag.
brooks mentioned this in D32095: makesyscalls: rip out arbitrary command execution.Sep 24 2021, 9:15 PM
brooks added a commit: rGfe388671ac85: makesyscalls.lua: add a CAPENABLED flag.Oct 19 2021, 11:21 PM

Revision Contents
Changeset List

PathSize
sys/
kern/
2 lines
tools/
4 lines

Diff 94516

View Options

sys/kern/syscalls.master

Loading...
View Options

sys/tools/makesyscalls.lua

Loading...