HomeFreeBSD

libcasper: introduce cap_fileargs service

Description

libcasper: introduce cap_fileargs service

cap_fileargs is a Casper service which helps to sandbox applications that need
access to the filesystem namespace. The main purpose of the service is to make
easy to capsicumize applications that works on multiple files passed in argv.

We have a couple example of using it but we still treat this service as an
experimental one.

Reviewed by: emsate (previous version), jonathan (partially)
Discussed with: many
Differential Revision: https://reviews.freebsd.org/D14407

Details

Provenance
oshogboAuthored on Nov 12 2018, 5:40 PM
Parents
rG1cde2e974d06: dtb.mk: Fix passing of ECHO to make_dtb{,o}.sh
Branches
Unknown
Tags
Unknown