Page MenuHomeFreeBSD

ktrace: Record socket violations with KTR_CAPFAIL
ClosedPublic

Authored by jfree on Jun 20 2023, 10:09 PM.
Referenced Files
Unknown Object (File)
Sat, Apr 11, 3:24 PM
Unknown Object (File)
Sat, Apr 11, 12:17 PM
Unknown Object (File)
Sat, Apr 11, 1:50 AM
Unknown Object (File)
Fri, Apr 10, 2:53 AM
Unknown Object (File)
Fri, Apr 10, 12:25 AM
Unknown Object (File)
Tue, Apr 7, 2:13 PM
Unknown Object (File)
Tue, Apr 7, 7:01 AM
Unknown Object (File)
Sun, Apr 5, 9:33 AM
Subscribers

Details

Summary
Report restricted access to socket addresses and protocols while
Capsicum violation tracing with CAPFAIL_ADDR and CAPFAIL_PROTO.

Programs that are not yet Capsicumized may be traced to discover
potential capability failures. With `ktrace -t p` and kdump, you
are given a list of syscalls as a starting point for program
Capsicumization.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped