[Bug 212083] capsicum lacks compat32 support

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Aug 23 20:27:05 UTC 2016


            Bug ID: 212083
           Summary: capsicum lacks compat32 support
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: emaste at freebsd.org

compat32 support for capsicum is currently stubbed out -- from

freebsd32_cap_enter(struct thread *td,
    struct freebsd32_cap_enter_args *uap)

         * We do not have an equivalent of capabilities.conf for freebsd32
         * compatibility, so do not allow capability mode for now.
        return (ENOSYS);

as the typical usage is something like:

if (cap_enter() < 0 && errno != ENOSYS)

binaries using compat32 will silently avoid being sandboxed.

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-bugs mailing list