| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The actual issue was the fact that if - was used then some restriction were
already set to stdin when we were applying caph_limit_stdio which was failing
due to the fact the fd was the fd was already restricted to lower rights.
Restricting stdio before actually opening the files prevent trying to raise the
right and fixes the issue.
And this allows to keep failing the program if restriction failed
Approved by: allanjude
Differential Revision: https://reviews.freebsd.org/D9723
Notes:
svn path=/head/; revision=314099
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When fed from a pipe, lam(1) would sometimes fail:
lam: unable to limit stdio: Capabilities insufficient
fixed regression in portsnap(8) introduced in r313938
This broke portsnap(8), the app that the capsicumization of lam(1) was
meant to secure.
# portsnap fetch update
Looking up portsnap.FreeBSD.org mirrors... 6 mirrors found.
Fetching snapshot tag from ec2-eu-west-1.portsnap.freebsd.org... done.
Fetching snapshot metadata... done.
Updating from Tue Feb 21 16:05:39 MSK 2017 to Tue Feb 21 16:59:30 MSK 2017.
Fetching 5 metadata patches.lam: unable to limit stdio: Capabilities insufficient
done.
Applying metadata patches... done.
Fetching 5 metadata files... lam: unable to limit stdio: Capabilities insufficient
/usr/sbin/portsnap: cannot open 8c94d2c3f8fcea20eb1fd82021566c99c63a010e6b3702ee11e7a491795bcfb8.gz: No such file or directory
metadata is corrupt.
Reported by: Vladimir Zakharov <zakharov.vv@gmail.com>, Ben Woods <woodsb02@gmail.com>
Notes:
svn path=/head/; revision=314098
|
|
|
|
|
|
|
|
|
|
|
| |
lam(1) is used in portsnap(8), so lock it down
Reviewed by: emaste, cem, jonathan
Sponsored by: ScaleEngine Inc.
Differential Revision: https://reviews.freebsd.org/D8076
Notes:
svn path=/head/; revision=313938
|
|
|
|
|
|
|
| |
This allows compilers and static analyzers to more thorough analysis.
Notes:
svn path=/head/; revision=227240
|
|
|
|
|
|
|
|
|
|
|
|
| |
is in accordance with the information provided at
ftp://ftp.cs.berkeley.edu/pub/4bsd/README.Impt.License.Change
Also add $FreeBSD$ to a few files to keep svn happy.
Discussed with: imp, rwatson
Notes:
svn path=/head/; revision=216370
|
|
|
|
|
|
|
|
| |
Most of these tools properly build at WARNS=6, except for their K&R
function declarations. Fix this, so we can bump WARNS as well.
Notes:
svn path=/head/; revision=201382
|
|
|
|
| |
Notes:
svn path=/head/; revision=148713
|
|
|
|
| |
Notes:
svn path=/head/; revision=132404
|
|
|
|
|
|
|
| |
arguments are processed, at least temporarily.
Notes:
svn path=/head/; revision=99221
|
|
|
|
| |
Notes:
svn path=/head/; revision=99112
|
|
|
|
| |
Notes:
svn path=/head/; revision=98934
|
|
|
|
|
|
|
|
| |
in main() and print usage, or if there are too many arguments, handle that
there, too.
Notes:
svn path=/head/; revision=98933
|
|
|
|
|
|
|
| |
MFC after: 3 days
Notes:
svn path=/head/; revision=81222
|
|
|
|
|
|
|
|
|
| |
names and revert to char *[].
bde by: bde, imp
Notes:
svn path=/head/; revision=72178
|
|
|
|
| |
Notes:
svn path=/head/; revision=72153
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use tolower() rather than bit or-ing
Sanity check user specified printf() format
Exit when too many input files are given
Remove register from variables
Reviewed by: markm, imp
Notes:
svn path=/head/; revision=72152
|
|
|
|
| |
Notes:
svn path=/head/; revision=62894
|
|
|
|
| |
Notes:
svn path=/head/; revision=50477
|
|
|
|
|
|
|
| |
function. Rewrote man page in mdoc format.
Notes:
svn path=/head/; revision=27497
|
|
Notes:
svn path=/cvs2svn/branches/CHRISTOS/; revision=1590
|