Change Details

Integrating bhyve snapshot mechanism with capsicum was deactivated in order for the snapshot mechanism to be used. The problems during the snapshot mechanism were caused by the use of some sockets that did not have the necessary permissions, such as the socket used to communicate between bhyve and bhyvectl or the file descriptors for the disks. In order to increase the protection of the operations done during the snapshot process I added the necessary restrictions for the used sockets and file descriptors and I replaced the open system call with openat. For some of the system calls(such as sysctlbyname) I used casper service in order to use these calls for a more secure running environment. The ticket is split between multiple tickets each providing o subset of the ticket from https://reviews.freebsd.org/D30471. Some of the changes provided by the stack apply some of changes already recommended in the opened ticket.

Integrating bhyve snapshot mechanism with capsicum was deactivated in order for the snapshot mechanism to be used. The problems during the snapshot mechanism were caused by the use of some sockets that did not have the necessary permissions, such as the socket used to communicate between bhyve and bhyvectl or the file descriptors for the disks. In order to increase the protection of the operations done during the snapshot process I added the necessary restrictions for the used sockets and file descriptors and I replaced the open system call with openat. For some of the system calls(such as sysctlbyname) I used casper service in order to use these calls for a more secure running environment.

Integrating bhyve snapshot mechanism with capsicum was deactivated in order for the snapshot mechanism to be used. The problems during the snapshot mechanism were caused by the use of some sockets that did not have the necessary permissions, such as the socket used to communicate between bhyve and bhyvectl or the file descriptors for the disks. In order to increase the protection of the operations done during the snapshot process I added the necessary restrictions for the used sockets and file descriptors and I replaced the open system call with openat. For some of the system calls(such as sysctlbyname) I used casper service in order to use these calls for a more secure running environment. The ticket is split between multiple tickets each providing o subset of the ticket from https://reviews.freebsd.org/D30471. Some of the changes provided by the stack apply some of changes already recommended in the opened ticket.