HardenedBSD/sbin
Pawel Jakub Dawidek 4d8dc3b838 When dropping privileges prefer capsicum over chroot+setgid+setuid.
We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).

X-MFC after:	capsicum is merged to stable/8
2011-03-21 21:31:50 +00:00
..
adjkerntz
atacontrol
atm
badsect
bsdlabel Widen fields that display partition offset/length. 2011-03-10 08:24:33 +00:00
camcontrol The camcontrol smppc option to clear a PHY error log is 'clearerrlog', 2011-01-05 18:27:38 +00:00
ccdconfig mdoc: drop redundant .Pp and .LP calls 2010-10-08 12:40:16 +00:00
clri
comcontrol
conscontrol
ddb Plug an fd leak 2010-11-22 07:00:47 +00:00
devd Don't generate input() since it's not used. 2010-11-22 12:33:48 +00:00
devfs
dhclient Use resolvconf(8) to update /etc/resolv.conf. 2011-03-18 12:23:20 +00:00
dmesg
dump The dump, fsck_ffs, fsdb, fsirand, newfs, makefs, and quot utilities 2011-01-24 06:17:05 +00:00
dumpfs Add support for FS_TRIM to user-mode UFS utilities. 2010-12-29 12:31:18 +00:00
dumpon
fdisk Supply maximum value as an argument to the decimal() function 2011-01-25 04:35:07 +00:00
fdisk_pc98
ffsinfo
fsck
fsck_ffs In checker, read journal by sectors. 2011-02-12 13:17:14 +00:00
fsck_msdosfs
fsdb The dump, fsck_ffs, fsdb, fsirand, newfs, makefs, and quot utilities 2011-01-24 06:17:05 +00:00
fsirand The dump, fsck_ffs, fsdb, fsirand, newfs, makefs, and quot utilities 2011-01-24 06:17:05 +00:00
gbde
geom Fix grammar. 2011-03-12 21:51:56 +00:00
ggate
growfs Fix typos - remove duplicate "is". 2011-02-23 09:22:33 +00:00
gvinum Fix some more warnings found by clang. 2010-11-22 20:10:48 +00:00
hastctl When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
hastd When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
ifconfig Bump date from previous commit. 2011-03-21 15:17:02 +00:00
init init(8): Document that login(1) is now responsible for recording logouts. 2011-01-23 14:54:45 +00:00
ipf
ipfw The first customer of the SO_USER_COOKIE option: 2010-11-12 13:05:17 +00:00
iscontrol Fix compilation with debug on. 2011-01-25 22:25:16 +00:00
kldconfig
kldload
kldstat In printfile(), exit the process instead of only printing the warning. 2010-11-13 16:49:07 +00:00
kldunload
ldconfig
mca
md5
mdconfig Add a check to make sure the provider name is "mdN" before printing the 2011-02-14 09:58:47 +00:00
mdmfs
mknod Fix some more warnings found by clang. 2010-11-22 20:10:48 +00:00
mksnap_ffs Note that a UFS filesystem can have up to 20 active snapshots. 2011-02-15 07:25:54 +00:00
mount Revert r217871. 2011-02-25 20:49:07 +00:00
mount_cd9660
mount_ext2fs
mount_hpfs
mount_msdosfs
mount_nfs Fix deprecated warning about -L which said -i was deprecated. 2010-12-26 22:29:44 +00:00
mount_ntfs
mount_nullfs
mount_reiserfs
mount_std
mount_udf
mount_unionfs Add a notice to the man page that batteries should be installed. 2010-09-21 08:25:00 +00:00
natd
newfs Xref makefs(8). 2011-02-22 15:31:40 +00:00
newfs_msdos
nfsiod
nos-tun
pfctl
pflogd Append to CFLAGS, don't clobber it. 2010-11-05 11:31:39 +00:00
ping
ping6 Add __unused. Ansi prototypes. 2010-12-19 13:40:38 +00:00
quotacheck
rcorder
reboot Remove stale reference to wtmp(5). 2010-10-11 20:17:23 +00:00
recoverdisk
resolvconf Add resolvconf(8) which manages resolv.conf. 2011-03-18 12:18:52 +00:00
restore mdoc: make pages render with mandoc 2010-10-21 12:27:13 +00:00
route - Fix array bounds checking. [1] 2010-12-08 15:12:37 +00:00
routed Fix use of AND operator: should be bitwise instead of logical. 2010-11-22 19:40:27 +00:00
rtsol
savecore Remove the advertising clause from UCB copyrighted files in sbin. This 2010-12-12 21:26:12 +00:00
sconfig
setkey mdoc: drop even more redundant .Pp calls 2010-10-19 12:35:40 +00:00
shutdown For compatibility with Linux and Solaris add poweroff(8). 2010-12-30 18:06:31 +00:00
spppcontrol
sunlabel mdoc: drop even more redundant .Pp calls 2010-10-19 12:35:40 +00:00
swapon
sysctl Introduce signed and unsigned version of CTLTYPE_QUAD, renaming 2011-01-19 23:00:25 +00:00
tunefs When creating a directory entry for the journal, always read at least 2011-02-12 13:12:45 +00:00
umount
Makefile Add resolvconf(8) which manages resolv.conf. 2011-03-18 12:18:52 +00:00
Makefile.amd64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.arm MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.i386 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.ia64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.inc
Makefile.mips MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.pc98 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.sparc64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00