Sandbox head(1) with fileargs.

[emaste]

usr.bin/head/head.c

47 ↗

(On Diff #39414)

If either <sys/types.h> or <sys/param.h> is needed, include it before other include files.

from style(9)

Still sys/cdefs.h first.

136 ↗

(On Diff #39414)

Should we call fileargs_free?

[oshogbo]

Add suggestion from @emaste .

[oshogbo]

We handle now empty argc and argv.

[emaste]

usr.bin/head/head.c

81–82 ↗

(On Diff #39587)

These additions maintain non-style(9) of variable declarations.

It's a pedantic comment, but as this change will likely be used as a reference for future fileargs additions we may want to address it; if we do, we should probably style(9) head.c first in a separate commit.

[oshogbo]

usr.bin/head/head.c

81–82 ↗

(On Diff #39587)

I created another review for making it more style(9) https://reviews.freebsd.org/D14498

[oshogbo]

Fix build without casper

[mmel]

How this can works on kernels build without 'options CAPABILITIES'? Note that CAPABILITIES option is
not included in kernel option for small embedded boards (arm, mips...)?
We should change CAPSICUM to mandatory or implement fallback here (as we already do in rest of tree)

Also, how this can be complied with WITHOUT_CAPSICUM=YES in make.conf? (imho, nanobsd uses it)

(same for wc and brandelf)

[oshogbo]

What you afraid of?
If you build system without capsicum/casper everything works caph_enter_casper don't fail in that case, the filearsgs_open is changed to the standard open(2) call>
Please check ot this header file: https://svnweb.freebsd.org/base/head/lib/libcasper/services/cap_fileargs/cap_fileargs.h?view=markup

[mmel]

Ahh, right, I overlooked this, sorry. So I taking back WITHOUT_CAPSICUM case.

But first part on my previous message is still applicable, if you run 'head' on
kernel compiled without 'option CAPSICUM' then it fail with 'function not implemented'.

[cem]

In D14409#392398, @mmel wrote:

if you run 'head' on
kernel compiled without 'option CAPSICUM' then it fail with 'function not implemented'.

Why do you think that? Maybe you don't have r341347?

[mmel]

bingo! I'm on r341345. And yes, r341347 fixed it.
Thanks and sorry for noise.