path: root/sys/bsm
diff options
authorPawel Jakub Dawidek <pjd@FreeBSD.org>2013-03-02 21:11:30 +0000
committerPawel Jakub Dawidek <pjd@FreeBSD.org>2013-03-02 21:11:30 +0000
commit7493f24ee6846df33931904c87493b08400df5bd (patch)
tree5dbc48bdb7b78718e22183ef377b76f2e3bc74c2 /sys/bsm
parent136b1ada11e4b3ec91b4b15562ba803e5ab66c10 (diff)
- Implement two new system calls:
int bindat(int fd, int s, const struct sockaddr *addr, socklen_t addrlen); int connectat(int fd, int s, const struct sockaddr *name, socklen_t namelen); which allow to bind and connect respectively to a UNIX domain socket with a path relative to the directory associated with the given file descriptor 'fd'. - Add manual pages for the new syscalls. - Make the new syscalls available for processes in capability mode sandbox. - Add capability rights CAP_BINDAT and CAP_CONNECTAT that has to be present on the directory descriptor for the syscalls to work. - Update audit(4) to support those two new syscalls and to handle path in sockaddr_un structure relative to the given directory descriptor. - Update procstat(1) to recognize the new capability rights. - Document the new capability rights in cap_rights_limit(2). Sponsored by: The FreeBSD Foundation Discussed with: rwatson, jilles, kib, des
Notes: svn path=/head/; revision=247667
Diffstat (limited to 'sys/bsm')
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/bsm/audit_kevents.h b/sys/bsm/audit_kevents.h
index 9d71fa28335c..d56a96b4e687 100644
--- a/sys/bsm/audit_kevents.h
+++ b/sys/bsm/audit_kevents.h
@@ -608,6 +608,8 @@
#define AUE_CAP_IOCTLS_GET 43204 /* TrustedBSD. */
#define AUE_CAP_FCNTLS_LIMIT 43205 /* TrustedBSD. */
#define AUE_CAP_FCNTLS_GET 43206 /* TrustedBSD. */
+#define AUE_BINDAT 43207 /* TrustedBSD. */
+#define AUE_CONNECTAT 43208 /* TrustedBSD. */
* Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the