Change Details

This adds a new system call, fchroot(2). The idea is to use it with Capsicum for oblivious sandboxing, but for now it's just a chroot(2) that takes a fd instead of path. This also modifies chroot(8) utility to add "-d", so one can do eg "chroot -nd 5 /bin/bash 5< /compat/jammy".

This is similar to chroot(2), but takes a file descriptor instead of path. A similar syscall exists in NetBSD. It is part of a larger patch to make absolute pathnames usable in Capsicum mode, but should be useful in other contexts too. Sponsored by: DSbD

This adds a new system callis similar to chroot(2), fchroot(2). The idea is to use itbut takes a file descriptor instead with Capsicum for oblivious sandboxing, but for now it's justof path. A similar syscall exists in NetBSD. It is part of a larger a chroot(2) that takes a fd instead of pathpatch to make absolute pathnames usable in Capsicum mode, but should be useful in other contexts too. This also modifies chroot(8) utility to add "-d", so one canSponsored by: DSbD do eg "chroot -nd 5 /bin/bash 5< /compat/jammy".