]> git.ipfire.org Git - thirdparty/dhcpcd.git/commit
privsep: Enable capsicum for network facing processes
authorRoy Marples <roy@marples.name>
Thu, 7 May 2020 19:57:22 +0000 (20:57 +0100)
committerRoy Marples <roy@marples.name>
Thu, 7 May 2020 19:57:22 +0000 (20:57 +0100)
commit08958eaee78ef439774778c4d2b6339ade2ef7bf
tree6658f3e35253c3e454db835643e0bdaaf860a885
parent61f4b7c4a95f7fed415302d9b06995fc9b077480
privsep: Enable capsicum for network facing processes

All fd's in network facing processes are fully limited.
Capability mode is only enabled for BPF processes because
it's too restrictive otherwise - the reasons are noted
in the commit.
configure
src/dhcpcd.c
src/privsep-bpf.c
src/privsep-inet.c
src/privsep.c
src/privsep.h