In D48136#1098656, @salvadore wrote:Hopefully it works now
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Mon, Dec 23
Mon, Dec 23
In D48136#1098654, @salvadore wrote:
Just for the record, the manual page was submitted in D48153 and has just been committed (bc201841d139).
tmpfs: Rework file handles
olce committed rGbc201841d139: mac_do(4): Revamp manual page after MAC/do updates (authored by olce).
mac_do(4): Revamp manual page after MAC/do updates
Sun, Dec 22
Sun, Dec 22
Thu, Dec 19
Thu, Dec 19
In D48063#1097137, @concussious.bugzilla_runbox.com wrote:I wonder if it would be good to .Nd set current process credentials atomically for people who use narrower console widths/straightforwardness. That doesn't remove any search keywords.
olce committed rG618c97b87b71: libprocstat: ZFS support: Makefile: Tidy up a bit (authored by olce).
libprocstat: ZFS support: Makefile: Tidy up a bit
setcred(2): Add manual page
Minor tweaks, fix a typo.
Wed, Dec 18
Wed, Dec 18
For some reason (maybe Hugo is too old?), I can't build the website, getting this:
ERROR render of "section" failed: "/path_to/doc/website/themes/beastie/layouts/_default/list.html:10:8": execute of template failed: template: _default/list.html:10:8: executing "main" at <.Content>: error calling Content: "/path_to/doc/website/content/en/community/_index.adoc:22:22": failed to render shortcode "get-event-last-year-info": failed to process shortcode: "/path_to/doc/website/themes/beastie/layouts/shortcodes/get-event-last-year-info.html:3:45": execute of template failed: template: shortcodes/get-event-last-year-info.html:3:45: executing "shortcodes/get-event-last-year-info.html" at <.Page.Sites.Default.Language.Lang>: can't evaluate field Default in type page.Sites Total in 149675 ms Error: error building site: render: failed to render pages: render of "home" failed: "/path_to/doc/website/themes/beastie/layouts/index.html:173:15": execute of template failed: template: index.html:173:15: executing "main" at <partial "events.html" .>: error calling partial: "/path_to/doc/website/themes/beastie/layouts/partials/events.html:8:52": execute of template failed: template: partials/events.html:8:52: executing "partials/events.html" at <.Sites.Default.Language.Lang>: can't evaluate field Default in type page.Sites *** Error code 1
so I may have missed some obvious problems in that initial proposal.
In the meantime, there's also D47616 which has lots of examples.
In D48129#1097617, @otis wrote:It seems to me that there is another problem, or that I'm missing something obvious:
The line from manpage:
# sysctl 'security.mac.do.rules=uid=1000:80,gid=0:any' security.mac.do.rules: sysctl: security.mac.do.rules=uid=1000:80: Invalid argumentgives the following error:
kernel: MAC/do: Parse error at index 9: No valid type found.
In D48129#1097603, @otis wrote:Yes, in next couple of whiles.
Could you please move the printing (see inline comment)? It is still misplaced.
Please see the inline comments, the printing is currently misplaced.
Tue, Dec 17
Tue, Dec 17
olce committed rG32c45723fa53: atomic(9): Update manpage after constifying atomic loads (authored by olce).
atomic(9): Update manpage after constifying atomic loads
x86 atomics: Remove unused WANT_FUNCTIONS
olce committed rGf1ddb6fb8c4d: MAC/do: Fix a compilation warning about an unused function (authored by olce).
MAC/do: Fix a compilation warning about an unused function
Mon, Dec 16
Mon, Dec 16
atomics: Constify loads: Fix powerpc build
Committed in rG53d2e0d4854997005271ee60791ab114bd6e0099.
All dependencies have been committed. The full diff in this revision is outdated.
Committed as rG11ba1f2fe2d4e151ffc0a66d03a0691a7b8d2866.
Committed as ddb3eb4efe55e57c206f3534263c77b837aff1dc.
MAC/do: Update copyright
olce committed rG675708aa402a: proc_set_cred(): Fix compilation of GENERIC-NODEBUG (authored by olce).
proc_set_cred(): Fix compilation of GENERIC-NODEBUG
Please see D48062 for a followup of the i386 discussion.
Keep same size for the generation number, so as to facilitate a quick commit of the other changes.
olce committed rG292c814931d9: MAC/do: sysctl_rules(): Always copy the rules specification string (authored by olce).
MAC/do: sysctl_rules(): Always copy the rules specification string
olce committed rGa20d50245f28: mountd(8): parsecred(): Re-order operations for clarity (authored by olce).
mountd(8): parsecred(): Re-order operations for clarity
olce committed rGe87848a8150e: mountd(8): Allow to pass {NGROUPS_MAX} + 1 groups (authored by olce).
mountd(8): Allow to pass {NGROUPS_MAX} + 1 groups
olce committed rGf2d2318fafbb: mountd(8): parsecred(): Remove "duplicate compression" (authored by olce).
mountd(8): parsecred(): Remove "duplicate compression"
cred: Hide internal flag CRED_FLAG_CAPMODE
olce committed rGde701f9bdbe0: MAC/do: Apply a rule on real UID/GID instead of effective ones (authored by olce).
MAC/do: Apply a rule on real UID/GID instead of effective ones
mdo(1): Use setcred() to change credentials
MAC/do: Convert internal TAILQs to STAILQs
MAC/do: toast_rules(): Minor simplification
olce committed rG4a03b64517b3: MAC/do: parse_rules(): Tolerate blanks around tokens (authored by olce).
MAC/do: parse_rules(): Tolerate blanks around tokens
olce committed rG8f7e8726e3f5: MAC/do: Interpret the new rules specification; Monitor setcred() (authored by olce).
MAC/do: Interpret the new rules specification; Monitor setcred()
olce committed rG6c3def74e2de: MAC/do: Support multiple users and groups as single rule's targets (authored by olce).
MAC/do: Support multiple users and groups as single rule's targets
MAC/do: Introduce rules reference counting
olce committed rGddb3eb4efe55: New setcred() system call and associated MAC hooks (authored by olce).
New setcred() system call and associated MAC hooks
MAC/do: Output errors when parsing rules
MAC/do: Ease input/output of ID types
olce committed rG40a664a463ba: MAC/do: Rename private OSD slot by removing 'mac_do_' prefix (authored by olce).
MAC/do: Rename private OSD slot by removing 'mac_do_' prefix
olce committed rG0af43c029048: MAC/do: Better parsing for IDs (strtoui_strict()) (authored by olce).
MAC/do: Better parsing for IDs (strtoui_strict())
olce committed rGe4ce30f8da61: MAC/do: parse_rule_element(): Style, more clarity (authored by olce).
MAC/do: parse_rule_element(): Style, more clarity
olce committed rG6aadc7b2ee05: MAC/do: 'struct rule': IDs and types as 'u_int', rename fields (authored by olce).
MAC/do: 'struct rule': IDs and types as 'u_int', rename fields
olce committed rGfa4352b74580: MAC/do: parse_rule_element(): Bug in parsing the origin ID (authored by olce).
MAC/do: parse_rule_element(): Bug in parsing the origin ID
MAC/do: jail_check()/jail_set(): Revamp
MAC/do: Fix jail_get() (PR_METHOD_GET)
olce committed rGf3a06ced2568: MAC/do: Sysctl knobs/jail parameters under MAC's common nodes (authored by olce).
MAC/do: Sysctl knobs/jail parameters under MAC's common nodes
olce committed rG2b2c19b7f697: MAC/do: Re-order jail methods more logically, rename (authored by olce).
MAC/do: Re-order jail methods more logically, rename
olce committed rGadd521c1a5d2: MAC/do: parse_rule_element(): Fix a panic, harden, simplify (authored by olce).
MAC/do: parse_rule_element(): Fix a panic, harden, simplify
MAC/do: Move destroy() to a better place
olce committed rGbeb5603c51e0: MAC/do: Remove the 'prison0' special cases in the common paths (authored by olce).
MAC/do: Remove the 'prison0' special cases in the common paths
olce committed rGb3f93680e39b: MAC/do: Enable changing 'security.mac.do.rules' from a jail (authored by olce).
MAC/do: Enable changing 'security.mac.do.rules' from a jail
MAC/do: Allocate/deallocate rules as a whole
MAC/do: Remove PR_METHOD_REMOVE method
olce committed rGbbf8af664dc9: MAC/do: Factor out setting/destroying rule structures (authored by olce).
MAC/do: Factor out setting/destroying rule structures
MAC/do: find_rules(): Clarify the contract