Change Details

Report vfs path lookups while Capsicum violation tracing with CAPFAIL_VFS. vfs caching is also ignored when tracing to mimic capability mode behavior. Programs that are not yet Capsicumized may be traced to discover potential capability failures. With `ktrace -t p` and kdump, you are given a list of syscalls as a starting point for program Capsicumization.

Report namei path lookups while Capsicum violation tracing with CAPFAIL_NAMEI. vfs caching is also ignored when tracing to mimic capability mode behavior. Programs that are not yet Capsicumized may be traced to discover potential capability failures. With `ktrace -t p` and kdump, you are given a list of syscalls as a starting point for program Capsicumization.

Report vfsnamei path lookups while Capsicum violation tracing with CAPFAIL_VFSNAMEI. vfs caching is also ignored when tracing to mimic capability mode behavior. Programs that are not yet Capsicumized may be traced to discover potential capability failures. With `ktrace -t p` and kdump, you are given a list of syscalls as a starting point for program Capsicumization.