Please welcome casperd daemon. It (and its services) will be responsible for

giving access to functionality that is not available in capability mode
sandbox. The functionality can be precisely restricted.

Start with the following services:
- system.dns - provides API compatible to:
	- gethostbyname(3),
	- gethostbyname2(3),
	- gethostbyaddr(3),
	- getaddrinfo(3),
	- getnameinfo(3),
- system.grp - provides getgrent(3)-compatible API,
- system.pwd - provides getpwent(3)-compatible API,
- system.random - allows to obtain entropy from /dev/random,
- system.sysctl - provides sysctlbyname(3-compatible API.

Sponsored by:	The FreeBSD Foundation

1 files changed, 46 insertions, 0 deletions

diff --git a/lib/libcapsicum/Makefile b/lib/libcapsicum/Makefile
new file mode 100644
index 000000000000..54d8dfba266f
--- /dev/null
+++ b/lib/libcapsicum/Makefile
@@ -0,0 +1,46 @@
+# $FreeBSD$
+
+LIB=	capsicum
+
+SHLIB_MAJOR=	0
+
+SRCS=	libcapsicum.c
+SRCS+=	libcapsicum_dns.c
+SRCS+=	libcapsicum_grp.c
+SRCS+=	libcapsicum_pwd.c
+SRCS+=	libcapsicum_random.c
+SRCS+=	libcapsicum_service.c
+SRCS+=	libcapsicum_sysctl.c
+
+INCS=	libcapsicum.h
+INCS+=	libcapsicum_dns.h
+INCS+=	libcapsicum_grp.h
+INCS+=	libcapsicum_pwd.h
+INCS+=	libcapsicum_random.h
+INCS+=	libcapsicum_service.h
+INCS+=	libcapsicum_sysctl.h
+
+DPADD=	${LIBNV}
+LDADD=	-lnv
+
+CFLAGS+=-I${.CURDIR}
+CFLAGS+=-I${.CURDIR}/../libnv
+
+WARNS?=	6
+
+MAN+=	libcapsicum.3
+
+MLINKS+=libcapsicum.3 cap_init.3
+MLINKS+=libcapsicum.3 cap_wrap.3
+MLINKS+=libcapsicum.3 cap_unwrap.3
+MLINKS+=libcapsicum.3 cap_sock.3
+MLINKS+=libcapsicum.3 cap_clone.3
+MLINKS+=libcapsicum.3 cap_close.3
+MLINKS+=libcapsicum.3 cap_limit_get.3
+MLINKS+=libcapsicum.3 cap_limit_set.3
+MLINKS+=libcapsicum.3 cap_send_nvlist.3
+MLINKS+=libcapsicum.3 cap_recv_nvlist.3
+MLINKS+=libcapsicum.3 cap_xfer_nvlist.3
+MLINKS+=libcapsicum.3 cap_service_open.3
+
+.include <bsd.lib.mk>