@lwhsu Do you want me to close this review?

Fix patch.

Right, my point is that there are tests in this file for functionality that we (now) have -- signalfd, timerfd, memfd, fstatat at least. Those tests should be connected to the build.

https://cgit.FreeBSD.org/src/commit/?id=fba81b33aabff74ad03d5f9f9663c176cf060fa6

The support for linux was removed: ba81b33aabff74ad03d5f9f9663c176cf060fa6

Also I don't think the capsicum-linux actually live any longer.
@emaste Have we talk about this with David? Should I try to reach out to him?

Nice I like this simplification.

I like this idea. Thank you.

Thank you for working on this.
Could we also add some test cases to contrib/capsicum-test ?

Ok :)

Why is that the goal? What's the problem with sending an nvlist that's part of another list? It's a natural and useful thing to be able to do. The only thing preventing it seems to be an oversight in the nvlist traversal code.

The goal, which obviously was not met, was to prevent sending an nvlist that is part of another list (array or list).
I think we should return an error from send/dump. What do you think?

Thank you.

I like this change, but I will verify it tomorrow if its fine with you :)
As I need to wrap my head around this calculations.

Address fedback from bapt@

I have missed this one. I simply looked into syscalls from ntpd.

Oh, ok.