Page MenuHomeFreeBSD

ktrace: Record socket violations with KTR_CAPFAIL
ClosedPublic

Authored by jfree on Jun 20 2023, 10:09 PM.
Referenced Files
F148982717: D40681.diff
Sat, Mar 21, 12:51 PM
F148970474: D40681.diff
Sat, Mar 21, 10:16 AM
Unknown Object (File)
Sat, Mar 14, 2:35 AM
Unknown Object (File)
Sat, Mar 7, 5:19 PM
Unknown Object (File)
Sat, Mar 7, 12:00 PM
Unknown Object (File)
Thu, Feb 26, 7:07 PM
Unknown Object (File)
Thu, Feb 26, 7:02 AM
Unknown Object (File)
Feb 11 2026, 10:24 PM
Subscribers

Details

Summary
Report restricted access to socket addresses and protocols while
Capsicum violation tracing with CAPFAIL_ADDR and CAPFAIL_PROTO.

Programs that are not yet Capsicumized may be traced to discover
potential capability failures. With `ktrace -t p` and kdump, you
are given a list of syscalls as a starting point for program
Capsicumization.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable