User Details
User Details
- User Since
- Aug 19 2014, 3:56 PM (356 w, 3 d)
Today
Today
oshogbo added a comment to D26958: sockstat: Use libcasper to capsicumize.
Fixes are on haed.
sockstat: use cap_pwd
sockstat: fix core dump
oshogbo added a comment to D26958: sockstat: Use libcasper to capsicumize.
Hello Oliver,
libcasper: add missing unistd.h
Yesterday
Yesterday
oshogbo added a comment to D26958: sockstat: Use libcasper to capsicumize.
Hello Oliver,
Tue, Jun 15
Tue, Jun 15
libcasper: fix descriptors numbers
libcasper: fix descriptors numbers
libcasper: fix descriptors numbers
Sun, Jun 13
Sun, Jun 13
oshogbo updated the diff for D29607: byhve: add option to specify IP address for gdb.
Address @jhb comments (I hope).
Fri, Jun 11
Fri, Jun 11
oshogbo added inline comments to D30667: fix tail -f on stdin.
oshogbo added a comment to D30667: fix tail -f on stdin.
Can you provide some more context?
libnv: optimize nvlist size calculation
Thu, Jun 10
Thu, Jun 10
libcasper: fix descriptors numbers
Sat, Jun 5
Sat, Jun 5
Tue, Jun 1
Tue, Jun 1
Yes. This looks go to me.
Sat, May 22
Sat, May 22
oshogbo updated the diff for D28223: libc: add cleanenv function.
Thu, May 20
Thu, May 20
oshogbo added inline comments to D29824: rtsold: Extend casper to support various interface operations.
Wed, May 19
Wed, May 19
In general it's a great work.
Minor requests.
oshogbo added inline comments to D28223: libc: add cleanenv function.
Apr 27 2021
Apr 27 2021
oshogbo added a comment to D28223: libc: add cleanenv function.
Apr 9 2021
Apr 9 2021
oshogbo added inline comments to D29607: byhve: add option to specify IP address for gdb.
oshogbo updated the diff for D29607: byhve: add option to specify IP address for gdb.
Address @jhb suggestions.
Apr 7 2021
Apr 7 2021
oshogbo committed R10:2b1d0c0087a9: fileargs: fix double caching of the same file (authored by oshogbo).
fileargs: fix double caching of the same file
oshogbo added inline comments to D29607: byhve: add option to specify IP address for gdb.
Apr 6 2021
Apr 6 2021
oshogbo requested review of D29607: byhve: add option to specify IP address for gdb.
LGTM.
Do you have commit bit or should I commit this?
LGTM.
I prefer this approach then forbidding whole socket syscall.
Apr 1 2021
Apr 1 2021
oshogbo added a comment to D29523: traceroute6: Fix rights for rcvsock.
After addressing @zlei.huang_gmail.com points - LGTM.
oshogbo added a comment to D29423: capsicum: Limit socket operations in capability mode.
Some minor notes.
Thank you for working on this.
Mar 24 2021
Mar 24 2021
rtld: fix the man page
rtld: introduce PRELOAD_FDS
rtld: style nits
oshogbo added a comment to D29343: flopen: simplify the code.
Thank you @kib for explanation, I will analyze this further.
Mar 19 2021
Mar 19 2021
oshogbo requested review of D29343: flopen: simplify the code.
oshogbo added inline comments to D29334: rtld: introduce PRELOAD_FDS.
Mar 18 2021
Mar 18 2021
oshogbo committed R10:c145b7954656: zfs: bring back possibility to rewind the checkpoint from (authored by oshogbo).
zfs: bring back possibility to rewind the checkpoint from
oshogbo committed R10:6bbca5ca3a66: zfs: bring back possibility to rewind the checkpoint from (authored by oshogbo).
zfs: bring back possibility to rewind the checkpoint from
oshogbo updated the diff for D29334: rtld: introduce PRELOAD_FDS.
oshogbo retitled D29334: rtld: introduce PRELOAD_FDS from rtld: intrdouce PRELOAD_FDS to rtld: introduce PRELOAD_FDS.
oshogbo requested review of D29334: rtld: introduce PRELOAD_FDS.
oshogbo requested review of D29333: rtld: intrdouce PRELOAD_FDS.
Mar 17 2021
Mar 17 2021
oshogbo added inline comments to D28223: libc: add cleanenv function.
oshogbo updated the diff for D28223: libc: add cleanenv function.
Address scf@ suggestions.
Mar 13 2021
Mar 13 2021
oshogbo committed R10:653ed678c703: zfs: bring back possibility to rewind the checkpoint from (authored by oshogbo).
zfs: bring back possibility to rewind the checkpoint from
Mar 1 2021
Mar 1 2021
service: respect nojailvnet keyword
Feb 16 2021
Feb 16 2021
oshogbo added inline comments to D28699: lookup: in capability mode, silently strengthen BENEATH to RBENEATH.
oshogbo added a comment to D28698: lookup: fix inverted condition for test to allow dotdot..
Ups sorry I just wanted to comment it without accepting it.
Shouldn't we return here a ECAPMODE ?
In capability mode there isn't any way where dot dot is valid right?
Jan 26 2021
Jan 26 2021
Jan 21 2021
Jan 21 2021
oshogbo added a comment to D28223: libc: add cleanenv function.
@0mp Thanks I addressed that.
Jan 20 2021
Jan 20 2021
cat: style nits
Jan 18 2021
Jan 18 2021
oshogbo updated the diff for D28223: libc: add cleanenv function.
Thank you @kib for hints!
oshogbo requested review of D28223: libc: add cleanenv function.
Jan 17 2021
Jan 17 2021
cat: disable building it with Casper
Jan 16 2021
Jan 16 2021
cat: style nits
cat: persistent errno
Jan 15 2021
Jan 15 2021
cat: Fix potential memory leak
oshogbo requested review of D28185: cat: restore errno.
cat: capsicumize it
oshogbo added a comment to D28083: cat: capsicumize it.
@arichardson
I just needed to add a new service to the tools/build/Makefile and it work like charm - https://github.com/oshogbo/freebsd-src/runs/1710760934 (mac will finish in a moment).
Do you want me to test something else?
oshogbo added a comment to D28083: cat: capsicumize it.
Yea, I wasn't sure about Linux/macOs build.
Good to know that! I will verify that!
We don't use the rescue headers to build a BOOTSTRAP version?
Jan 12 2021
Jan 12 2021
oshogbo committed R10:d2ceee38ca26: casper: convert macros to inline functions (authored by oshogbo).
casper: convert macros to inline functions
Jan 10 2021
Jan 10 2021
oshogbo requested review of D28083: cat: capsicumize it.
fileargs: add support for realpath
Jan 9 2021
Jan 9 2021
fileargs: add tests
Jan 4 2021
Jan 4 2021
oshogbo committed R10:459511895e48: cap_sysctl: expose structures and variables (authored by oshogbo).
cap_sysctl: expose structures and variables
oshogbo committed R10:8c121177f063: casper: convert macros to inline functions (authored by oshogbo).
casper: convert macros to inline functions
oshogbo committed R10:381073282961: lib9p: fix building on systems without capser (authored by oshogbo).
lib9p: fix building on systems without capser
Jan 3 2021
Jan 3 2021
oshogbo committed R10:845b27372895: bhyve: fix build without casper/capsicum support (authored by oshogbo).
bhyve: fix build without casper/capsicum support
oshogbo committed R10:966026246e62: bhyve: fix build without casper/capsicum support (authored by oshogbo).
bhyve: fix build without casper/capsicum support
oshogbo committed R10:34535dace9f0: cap_net: CAPNET_CONNECT and CAPNET_CONNECTDNS are not mutually exclusive (authored by oshogbo).
cap_net: CAPNET_CONNECT and CAPNET_CONNECTDNS are not mutually exclusive
oshogbo committed R10:b7876aec957e: cap_net: allow to use the service without setting the limits (authored by oshogbo).
cap_net: allow to use the service without setting the limits
oshogbo committed R10:4084669d1867: capser: add cap_net to the list of services (authored by oshogbo).
capser: add cap_net to the list of services
Nov 18 2020
Nov 18 2020
What was motivation for this? Do you have any use case for that?
Add CTLFLAG_MPSAFE to the suser_enabled sysctl.
oshogbo added inline comments to D24832: libcasper: Create a minimal cap_netdb service.
oshogbo added inline comments to D26958: sockstat: Use libcasper to capsicumize.
jail: introduce per jail suser_enabled setting