Change Details

This change takes capsicum-test from upstream [1] and applies some local changes to make the openat test pass on FreeBSD, as well as make the test execute using an absolute path. The former local change is under discussion: I favored my solution for the time being [2], but @drysdale_google.com is proposing an alternate solution [3]; the latter change--to make capsicum-test pass when executed via an absolute path--has been submitted upstream [4]. 1. https://github.com/google/capsicum-test 2. https://github.com/google/capsicum-test/pull/35/ 3. https://github.com/google/capsicum-test/pull/40/ 4. https://github.com/google/capsicum-test/pull/41/ This change requires D19755 and D19756. TODO: * conditionalize running capsicum-test on CAPABILITIES-enabled kernels, as some downstream consumers, e.g., Netflix, don't seem to run CAPABILITIES-enabled kernels. * conditionalize running the mqueuefs tests when `feature_present("p1003_1b_mqueue");` returns boolean true. MFC after: 1 month

This change takes capsicum-test from upstream [1] and applies some local changes to make the openat test pass on FreeBSD, as well as make the test execute using an absolute path (this is needed for the test to be executed via Kyua). The former local change is under discussion; I favored my solution for the time being [2], but @drysdale_google.com is proposing an alternate solution [3]; the latter change--to make capsicum-test pass when executed via an absolute path--has been submitted upstream [4]. 1. https://github.com/google/capsicum-test 2. https://github.com/google/capsicum-test/pull/35/ 3. https://github.com/google/capsicum-test/pull/40/ 4. https://github.com/google/capsicum-test/pull/41/ This change requires D19755 and D19756. TODO: * conditionalize running capsicum-test on CAPABILITIES-enabled kernels, as some downstream consumers, e.g., Netflix, don't seem to run CAPABILITIES-enabled kernels. * conditionalize running the mqueuefs tests when `feature_present("p1003_1b_mqueue");` returns boolean true. MFC after: 1 month

This change takes capsicum-test from upstream [1] and applies some local changes to make the openat test pass on FreeBSD, as well as make the test execute using an absolute path. The former local change is under discussion: (this is needed for the test to be executed I favored my solution for the time being [2],via Kyua). but @drysdale_google.com isThe former local change is under discussion; I favored my solution proposing an alternate solution [3];for the time being [2], the latter change--to make capsicum-testbut @drysdale_google.com is proposing an alternate solution [3]; the latter change--to make capsicum-test pass when executed via an absolute path--has been submitted upstream [4]. 1. https://github.com/google/capsicum-test 2. https://github.com/google/capsicum-test/pull/35/ 3. https://github.com/google/capsicum-test/pull/40/ 4. https://github.com/google/capsicum-test/pull/41/ This change requires D19755 and D19756. TODO: * conditionalize running capsicum-test on CAPABILITIES-enabled kernels, as some downstream consumers, e.g., Netflix, don't seem to run CAPABILITIES-enabled kernels. * conditionalize running the mqueuefs tests when `feature_present("p1003_1b_mqueue");` returns boolean true. MFC after: 1 month