Changeset View

Standalone View

Show First 20 Lines • Show All 542 Lines • ▼ Show 20 Lines	goto err;

if (fstat(fd, &sbuf) < 0) {		if (fstat(fd, &sbuf) < 0) {
warn("Could not stat backing file %s", path);		warn("Could not stat backing file %s", path);
goto err;		goto err;
}		}

#ifndef WITHOUT_CAPSICUM		#ifndef WITHOUT_CAPSICUM
cap_rights_init(&rights, CAP_FSYNC, CAP_IOCTL, CAP_READ, CAP_SEEK,		cap_rights_init(&rights, CAP_FSYNC, CAP_IOCTL, CAP_READ, CAP_SEEK,
CAP_WRITE, CAP_FSTAT, CAP_EVENT);		CAP_WRITE, CAP_FSTAT, CAP_EVENT, CAP_FPATHCONF);
if (ro)		if (ro)
cap_rights_clear(&rights, CAP_FSYNC, CAP_WRITE);		cap_rights_clear(&rights, CAP_FSYNC, CAP_WRITE);

if (caph_rights_limit(fd, &rights) == -1)		if (caph_rights_limit(fd, &rights) == -1)
errx(EX_OSERR, "Unable to apply rights for sandbox");		errx(EX_OSERR, "Unable to apply rights for sandbox");
#endif		#endif

/*		/*
▲ Show 20 Lines • Show All 530 Lines • Show Last 20 Lines