Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Jun 2009 08:27:21 GMT
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 163768 for review
Message-ID:  <200906080827.n588RLEa090191@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=163768

Change 163768 by rwatson@rwatson_freebsd_capabilities on 2009/06/08 08:26:29

	Do push executing process into a sandbox before fexecve(2).

Affected files ...

.. //depot/projects/trustedbsd/capabilities/src/tools/cap/cap_exec/cap_exec.c#4 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/src/tools/cap/cap_exec/cap_exec.c#4 (text+ko) ====

@@ -124,10 +124,8 @@
 		 * Global namespaces no longer required, enter capability
 		 * mode.
 		 */
-#if 0
 		if (cap_enter() < 0)
 			err(-1, "cap_enter");
-#endif
 
 		/*
 		 * Set up stdin, stdout, and stderr by wrapping the existing



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200906080827.n588RLEa090191>