Page MenuHomeFreeBSD

ktrace: Record syscall violations with KTR_CAPFAIL
ClosedPublic

Authored by jfree on Jun 20 2023, 10:05 PM.
Referenced Files
Unknown Object (File)
Thu, Oct 16, 6:26 AM
Unknown Object (File)
Wed, Oct 15, 7:03 PM
Unknown Object (File)
Wed, Oct 15, 7:03 PM
Unknown Object (File)
Wed, Oct 15, 7:03 PM
Unknown Object (File)
Wed, Oct 15, 8:36 AM
Unknown Object (File)
Tue, Oct 14, 1:15 AM
Unknown Object (File)
Thu, Sep 18, 5:39 AM
Unknown Object (File)
Sep 16 2025, 6:15 PM
Subscribers

Details

Summary
Report syscalls that are not allowed in capability mode with
CAPFAIL_SYSCALL.

Programs that are not yet Capsicumized may be traced to discover
potential capability failures. With `ktrace -t p` and kdump, you
are given a list of syscalls as a starting point for program
Capsicumization.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable