HomeFreeBSD

libcasper: introduce cap_fileargs service

Description

libcasper: introduce cap_fileargs service

cap_fileargs is a Casper service which helps to sandbox applications that need
access to the filesystem namespace. The main purpose of the service is to make
easy to capsicumize applications that works on multiple files passed in argv.

We have a couple example of using it but we still treat this service as an
experimental one.

Reviewed by: emsate (previous version), jonathan (partially)
Discussed with: many
Differential Revision: https://reviews.freebsd.org/D14407

Details

Committed
oshogboNov 12 2018, 5:40 PM
Reviewer
jonathan
Differential Revision
D14407: Introduce cap_fileargs.
Parents
rS340372: dtb.mk: Fix passing of ECHO to make_dtb{,o}.sh
Branches
Unknown
Tags
Unknown