Page MenuHomeFreeBSD
Feed Advanced Search

Mon, Dec 23

olce added a comment to D48136: status: 2024Q4: mac_do(4), setcred(2), mdo(1).

Hopefully it works now

Mon, Dec 23, 3:58 PM
olce added a comment to D48136: status: 2024Q4: mac_do(4), setcred(2), mdo(1).

Screenshot.png (881×1 px, 303 KB)

Here it is. At first glance I see a list that needs to be fixed, but I have not reviewed the report yet, there might be something else.

Mon, Dec 23, 3:53 PM
olce added a comment to D48129: mac_do: Log credentials switching.

Just for the record, the manual page was submitted in D48153 and has just been committed (bc201841d139).

Mon, Dec 23, 3:05 PM
olce committed rG1ccbdf561f41: tmpfs: Rework file handles (authored by olce).
tmpfs: Rework file handles
Mon, Dec 23, 2:48 PM
olce closed D47956: tmpfs: Rework file handles.
Mon, Dec 23, 2:48 PM
olce closed D48153: mac_do(4): Revamp manual page after MAC/do updates.
Mon, Dec 23, 2:41 PM
olce committed rGbc201841d139: mac_do(4): Revamp manual page after MAC/do updates (authored by olce).
mac_do(4): Revamp manual page after MAC/do updates
Mon, Dec 23, 2:41 PM
olce added inline comments to D48153: mac_do(4): Revamp manual page after MAC/do updates.
Mon, Dec 23, 2:28 PM
olce added inline comments to D47956: tmpfs: Rework file handles.
Mon, Dec 23, 2:20 PM

Sun, Dec 22

olce accepted D48177: mount(8): Avoid truncation when fstab-formatting unionfs mount info.
Sun, Dec 22, 5:57 PM

Thu, Dec 19

olce updated subscribers of D48153: mac_do(4): Revamp manual page after MAC/do updates.
Thu, Dec 19, 10:48 PM
olce requested review of D48153: mac_do(4): Revamp manual page after MAC/do updates.
Thu, Dec 19, 10:41 PM
olce added a comment to D48063: setcred(): Add manual page.

I wonder if it would be good to .Nd set current process credentials atomically for people who use narrower console widths/straightforwardness. That doesn't remove any search keywords.

Thu, Dec 19, 10:40 PM
olce committed rG618c97b87b71: libprocstat: ZFS support: Makefile: Tidy up a bit (authored by olce).
libprocstat: ZFS support: Makefile: Tidy up a bit
Thu, Dec 19, 10:37 PM
olce committed rGb6f4027ad9a2: setcred(2): Add manual page (authored by olce).
setcred(2): Add manual page
Thu, Dec 19, 10:37 PM
olce closed D48070: libprocstat: ZFS support: Makefile: Tidy up a bit.
Thu, Dec 19, 10:37 PM
olce closed D48063: setcred(): Add manual page.
Thu, Dec 19, 10:37 PM
olce updated the diff for D48136: status: 2024Q4: mac_do(4), setcred(2), mdo(1).

Minor tweaks, fix a typo.

Thu, Dec 19, 9:40 PM

Wed, Dec 18

olce added a comment to D48136: status: 2024Q4: mac_do(4), setcred(2), mdo(1).

For some reason (maybe Hugo is too old?), I can't build the website, getting this:

ERROR render of "section" failed: "/path_to/doc/website/themes/beastie/layouts/_default/list.html:10:8": execute of template failed: template: _default/list.html:10:8: executing "main" at <.Content>: error calling Content: "/path_to/doc/website/content/en/community/_index.adoc:22:22": failed to render shortcode "get-event-last-year-info": failed to process shortcode: "/path_to/doc/website/themes/beastie/layouts/shortcodes/get-event-last-year-info.html:3:45": execute of template failed: template: shortcodes/get-event-last-year-info.html:3:45: executing "shortcodes/get-event-last-year-info.html" at <.Page.Sites.Default.Language.Lang>: can't evaluate field Default in type page.Sites
Total in 149675 ms
Error: error building site: render: failed to render pages: render of "home" failed: "/path_to/doc/website/themes/beastie/layouts/index.html:173:15": execute of template failed: template: index.html:173:15: executing "main" at <partial "events.html" .>: error calling partial: "/path_to/doc/website/themes/beastie/layouts/partials/events.html:8:52": execute of template failed: template: partials/events.html:8:52: executing "partials/events.html" at <.Sites.Default.Language.Lang>: can't evaluate field Default in type page.Sites
*** Error code 1

so I may have missed some obvious problems in that initial proposal.

Wed, Dec 18, 10:41 PM
olce requested review of D48136: status: 2024Q4: mac_do(4), setcred(2), mdo(1).
Wed, Dec 18, 10:37 PM
olce added a comment to D48129: mac_do: Log credentials switching.

In the meantime, there's also D47616 which has lots of examples.

Wed, Dec 18, 10:03 PM
olce added a comment to D48129: mac_do: Log credentials switching.

It seems to me that there is another problem, or that I'm missing something obvious:

The line from manpage:

# sysctl 'security.mac.do.rules=uid=1000:80,gid=0:any'
security.mac.do.rules:
sysctl: security.mac.do.rules=uid=1000:80: Invalid argument

gives the following error:

kernel: MAC/do: Parse error at index 9: No valid type found.
Wed, Dec 18, 10:01 PM
olce added a comment to D48129: mac_do: Log credentials switching.

Yes, in next couple of whiles.

Wed, Dec 18, 8:30 PM
olce added a comment to D48129: mac_do: Log credentials switching.

Could you please move the printing (see inline comment)? It is still misplaced.

Wed, Dec 18, 8:26 PM
olce requested changes to D48129: mac_do: Log credentials switching.

Please see the inline comments, the printing is currently misplaced.

Wed, Dec 18, 4:41 PM

Tue, Dec 17

olce committed rG32c45723fa53: atomic(9): Update manpage after constifying atomic loads (authored by olce).
atomic(9): Update manpage after constifying atomic loads
Tue, Dec 17, 2:49 PM
olce committed rGfa368cc86ceb: x86 atomics: Remove unused WANT_FUNCTIONS (authored by olce).
x86 atomics: Remove unused WANT_FUNCTIONS
Tue, Dec 17, 2:49 PM
olce closed D48061: x86 atomics: Remove unused WANT_FUNCTIONS.
Tue, Dec 17, 2:49 PM
olce committed rGf1ddb6fb8c4d: MAC/do: Fix a compilation warning about an unused function (authored by olce).
MAC/do: Fix a compilation warning about an unused function
Tue, Dec 17, 2:49 PM
olce accepted D48077: include: add a userland version of __assert_unreachable.
Tue, Dec 17, 2:31 PM
olce added a comment to D48063: setcred(): Add manual page.

Ping?

Tue, Dec 17, 12:52 PM

Mon, Dec 16

olce committed rGa9722e5ae851: atomics: Constify loads: Fix powerpc build (authored by olce).
atomics: Constify loads: Fix powerpc build
Mon, Dec 16, 7:19 PM
olce closed D47601: MAC/do: sysctl_rules(): Set the requesting's thread's jail's rules.

Committed in rG53d2e0d4854997005271ee60791ab114bd6e0099.

Mon, Dec 16, 6:26 PM
olce closed D47633: MAC/do 2.0.

All dependencies have been committed. The full diff in this revision is outdated.

Mon, Dec 16, 5:57 PM
olce accepted D47633: MAC/do 2.0.
Mon, Dec 16, 5:56 PM
olce closed D47607: MAC/do: Prefix internal functions used as hooks/callbacks.

Committed as rG11ba1f2fe2d4e151ffc0a66d03a0691a7b8d2866.

Mon, Dec 16, 5:55 PM
olce closed D47618: New setcred() system call and associated MAC hooks.

Committed as ddb3eb4efe55e57c206f3534263c77b837aff1dc.

Mon, Dec 16, 5:46 PM
olce committed rGe94684b3e0d9: MAC/do: Update copyright (authored by olce).
MAC/do: Update copyright
Mon, Dec 16, 5:23 PM
olce committed rG675708aa402a: proc_set_cred(): Fix compilation of GENERIC-NODEBUG (authored by olce).
proc_set_cred(): Fix compilation of GENERIC-NODEBUG
Mon, Dec 16, 3:41 PM
olce added a comment to D46887: atomics: Constify loads.

Please see D48062 for a followup of the i386 discussion.

Mon, Dec 16, 3:31 PM
olce added inline comments to D47956: tmpfs: Rework file handles.
Mon, Dec 16, 3:18 PM
olce updated the diff for D47956: tmpfs: Rework file handles.

Keep same size for the generation number, so as to facilitate a quick commit of the other changes.

Mon, Dec 16, 3:09 PM
olce committed rG292c814931d9: MAC/do: sysctl_rules(): Always copy the rules specification string (authored by olce).
MAC/do: sysctl_rules(): Always copy the rules specification string
Mon, Dec 16, 2:52 PM
olce closed D47608: MAC/do: Sysctl knobs/jail parameters under MAC's common nodes.
Mon, Dec 16, 2:52 PM
olce closed D47605: MAC/do: parse_rule_element(): Fix a panic, harden, simplify.
Mon, Dec 16, 2:52 PM
olce closed D47600: MAC/do: sysctl_rules(): Always copy the rules specification string.
Mon, Dec 16, 2:51 PM
olce committed rGa20d50245f28: mountd(8): parsecred(): Re-order operations for clarity (authored by olce).
mountd(8): parsecred(): Re-order operations for clarity
Mon, Dec 16, 2:51 PM
olce closed D47594: MAC/do: Rename internal mac_do_rule_find() => find_rules().
Mon, Dec 16, 2:51 PM
olce committed rGe87848a8150e: mountd(8): Allow to pass {NGROUPS_MAX} + 1 groups (authored by olce).
mountd(8): Allow to pass {NGROUPS_MAX} + 1 groups
Mon, Dec 16, 2:51 PM
olce closed D47015: mountd(8): parsecred(): Re-order operations for clarity.
Mon, Dec 16, 2:51 PM
olce committed rGf2d2318fafbb: mountd(8): parsecred(): Remove "duplicate compression" (authored by olce).
mountd(8): parsecred(): Remove "duplicate compression"
Mon, Dec 16, 2:51 PM
olce closed D47016: mountd(8): Allow to pass {NGROUPS_MAX} + 1 groups.
Mon, Dec 16, 2:51 PM
olce closed D46921: mountd(8): parsecred(): Groups limit: NGROUPS_MAX => NGROUPS_MAX + 1.
Mon, Dec 16, 2:51 PM
olce committed rG09290c3a0c82: cred: Hide internal flag CRED_FLAG_CAPMODE (authored by olce).
cred: Hide internal flag CRED_FLAG_CAPMODE
Mon, Dec 16, 2:51 PM
olce closed D47012: exports(5): -maproot, -mapall: Explain the fallback on no group.
Mon, Dec 16, 2:51 PM
olce closed D46920: mountd(8): parsecred(): Remove "duplicate compression".
Mon, Dec 16, 2:51 PM
olce closed D46909: cred: Hide internal flag CRED_FLAG_CAPMODE.
Mon, Dec 16, 2:51 PM
olce committed rGde701f9bdbe0: MAC/do: Apply a rule on real UID/GID instead of effective ones (authored by olce).
MAC/do: Apply a rule on real UID/GID instead of effective ones
Mon, Dec 16, 2:48 PM
olce committed rGe395e354823b: mdo(1): Use setcred() to change credentials (authored by olce).
mdo(1): Use setcred() to change credentials
Mon, Dec 16, 2:48 PM
olce committed rGc7fc71c6af07: MAC/do: Convert internal TAILQs to STAILQs (authored by olce).
MAC/do: Convert internal TAILQs to STAILQs
Mon, Dec 16, 2:48 PM
olce committed rG2110eef4bf60: MAC/do: toast_rules(): Minor simplification (authored by olce).
MAC/do: toast_rules(): Minor simplification
Mon, Dec 16, 2:48 PM
olce committed rG4a03b64517b3: MAC/do: parse_rules(): Tolerate blanks around tokens (authored by olce).
MAC/do: parse_rules(): Tolerate blanks around tokens
Mon, Dec 16, 2:48 PM
olce committed rG8f7e8726e3f5: MAC/do: Interpret the new rules specification; Monitor setcred() (authored by olce).
MAC/do: Interpret the new rules specification; Monitor setcred()
Mon, Dec 16, 2:47 PM
olce committed rG6c3def74e2de: MAC/do: Support multiple users and groups as single rule's targets (authored by olce).
MAC/do: Support multiple users and groups as single rule's targets
Mon, Dec 16, 2:47 PM
olce committed rG3d8d91a5b32c: MAC/do: Introduce rules reference counting (authored by olce).
MAC/do: Introduce rules reference counting
Mon, Dec 16, 2:47 PM
olce committed rGddb3eb4efe55: New setcred() system call and associated MAC hooks (authored by olce).
New setcred() system call and associated MAC hooks
Mon, Dec 16, 2:47 PM
olce committed rG87c06b7d026f: MAC/do: Output errors when parsing rules (authored by olce).
MAC/do: Output errors when parsing rules
Mon, Dec 16, 2:47 PM
olce closed D47845: MAC/do: Apply a rule on real UID/GID instead of effective ones.
Mon, Dec 16, 2:47 PM
olce committed rG65766063f85d: MAC/do: Ease input/output of ID types (authored by olce).
MAC/do: Ease input/output of ID types
Mon, Dec 16, 2:47 PM
olce closed D47624: MAC/do: Convert internal TAILQs to STAILQs.
Mon, Dec 16, 2:47 PM
olce committed rG40a664a463ba: MAC/do: Rename private OSD slot by removing 'mac_do_' prefix (authored by olce).
MAC/do: Rename private OSD slot by removing 'mac_do_' prefix
Mon, Dec 16, 2:47 PM
olce closed D47622: MAC/do: toast_rules(): Minor simplification.
Mon, Dec 16, 2:47 PM
olce closed D47621: mdo(1): Use setcred() to change credentials.
Mon, Dec 16, 2:47 PM
olce committed rG0af43c029048: MAC/do: Better parsing for IDs (strtoui_strict()) (authored by olce).
MAC/do: Better parsing for IDs (strtoui_strict())
Mon, Dec 16, 2:47 PM
olce committed rGe4ce30f8da61: MAC/do: parse_rule_element(): Style, more clarity (authored by olce).
MAC/do: parse_rule_element(): Style, more clarity
Mon, Dec 16, 2:47 PM
olce closed D47620: MAC/do: Interpret the new rules specification; Monitor setcred().
Mon, Dec 16, 2:47 PM
olce committed rG6aadc7b2ee05: MAC/do: 'struct rule': IDs and types as 'u_int', rename fields (authored by olce).
MAC/do: 'struct rule': IDs and types as 'u_int', rename fields
Mon, Dec 16, 2:47 PM
olce committed rGfa4352b74580: MAC/do: parse_rule_element(): Bug in parsing the origin ID (authored by olce).
MAC/do: parse_rule_element(): Bug in parsing the origin ID
Mon, Dec 16, 2:47 PM
olce closed D47619: MAC/do: Introduce rules reference counting.
Mon, Dec 16, 2:47 PM
olce committed rG11eb32958f2c: MAC/do: jail_check()/jail_set(): Revamp (authored by olce).
MAC/do: jail_check()/jail_set(): Revamp
Mon, Dec 16, 2:47 PM
olce committed rG2a20ce91dc29: MAC/do: Fix jail_get() (PR_METHOD_GET) (authored by olce).
MAC/do: Fix jail_get() (PR_METHOD_GET)
Mon, Dec 16, 2:47 PM
olce closed D47617: MAC/do: Output errors when parsing rules.
Mon, Dec 16, 2:47 PM
olce closed D47772: MAC/do: Rename private OSD slot by removing 'mac_do_' prefix.
Mon, Dec 16, 2:47 PM
olce committed rGf3a06ced2568: MAC/do: Sysctl knobs/jail parameters under MAC's common nodes (authored by olce).
MAC/do: Sysctl knobs/jail parameters under MAC's common nodes
Mon, Dec 16, 2:47 PM
olce closed D47615: MAC/do: Ease input/output of ID types.
Mon, Dec 16, 2:47 PM
olce committed rG2b2c19b7f697: MAC/do: Re-order jail methods more logically, rename (authored by olce).
MAC/do: Re-order jail methods more logically, rename
Mon, Dec 16, 2:47 PM
olce committed rGadd521c1a5d2: MAC/do: parse_rule_element(): Fix a panic, harden, simplify (authored by olce).
MAC/do: parse_rule_element(): Fix a panic, harden, simplify
Mon, Dec 16, 2:47 PM
olce committed rG73cecc0ef78e: MAC/do: Move destroy() to a better place (authored by olce).
MAC/do: Move destroy() to a better place
Mon, Dec 16, 2:47 PM
olce closed D47614: MAC/do: Better parsing for IDs (strtoui_strict()).
Mon, Dec 16, 2:47 PM
olce committed rGbeb5603c51e0: MAC/do: Remove the 'prison0' special cases in the common paths (authored by olce).
MAC/do: Remove the 'prison0' special cases in the common paths
Mon, Dec 16, 2:47 PM
olce closed D47613: MAC/do: 'struct rule': IDs and types as 'u_int', rename fields.
Mon, Dec 16, 2:47 PM
olce closed D47612: MAC/do: parse_rule_element(): Bug in parsing the origin ID.
Mon, Dec 16, 2:47 PM
olce closed D47611: MAC/do: parse_rule_element(): Style, more clarity.
Mon, Dec 16, 2:47 PM
olce committed rGb3f93680e39b: MAC/do: Enable changing 'security.mac.do.rules' from a jail (authored by olce).
MAC/do: Enable changing 'security.mac.do.rules' from a jail
Mon, Dec 16, 2:47 PM
olce closed D47610: MAC/do: jail_check()/jail_set(): Revamp.
Mon, Dec 16, 2:47 PM
olce committed rG3186b192e4db: MAC/do: Allocate/deallocate rules as a whole (authored by olce).
MAC/do: Allocate/deallocate rules as a whole
Mon, Dec 16, 2:47 PM
olce committed rG301eeb10dc19: MAC/do: Remove PR_METHOD_REMOVE method (authored by olce).
MAC/do: Remove PR_METHOD_REMOVE method
Mon, Dec 16, 2:47 PM
olce committed rGbbf8af664dc9: MAC/do: Factor out setting/destroying rule structures (authored by olce).
MAC/do: Factor out setting/destroying rule structures
Mon, Dec 16, 2:47 PM
olce closed D47609: MAC/do: Fix jail_get() (PR_METHOD_GET).
Mon, Dec 16, 2:47 PM
olce committed rGb2c661fe7e0b: MAC/do: find_rules(): Clarify the contract (authored by olce).
MAC/do: find_rules(): Clarify the contract
Mon, Dec 16, 2:47 PM