HardenedBSD/sbin/hastd
Pawel Jakub Dawidek 4d8dc3b838 When dropping privileges prefer capsicum over chroot+setgid+setuid.
We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).

X-MFC after:	capsicum is merged to stable/8
2011-03-21 21:31:50 +00:00
..
activemap.c
activemap.h
control.c Remove stale comment. Yes, it is valid to set role back to init. 2011-03-21 15:08:10 +00:00
control.h Don't open configuration file from worker process. Handle SIGHUP in the 2011-01-24 15:04:15 +00:00
crc32.c Allow to checksum on-the-wire data using either CRC32 or SHA256. 2011-03-06 22:56:14 +00:00
crc32.h Allow to checksum on-the-wire data using either CRC32 or SHA256. 2011-03-06 22:56:14 +00:00
ebuf.c Fix typos. 2010-06-14 21:44:58 +00:00
ebuf.h
event.c Forgot to add event.c and event.h in r212038. 2010-08-31 09:38:43 +00:00
event.h Forgot to add event.c and event.h in r212038. 2010-08-31 09:38:43 +00:00
hast_checksum.c Allow to checksum on-the-wire data using either CRC32 or SHA256. 2011-03-06 22:56:14 +00:00
hast_checksum.h Allow to checksum on-the-wire data using either CRC32 or SHA256. 2011-03-06 22:56:14 +00:00
hast_compression.c Allow to compress on-the-wire data using two algorithms: 2011-03-06 23:09:33 +00:00
hast_compression.h Allow to compress on-the-wire data using two algorithms: 2011-03-06 23:09:33 +00:00
hast_proto.c Allow to compress on-the-wire data using two algorithms: 2011-03-06 23:09:33 +00:00
hast_proto.h Constify arguments we can constify. 2010-08-30 22:26:42 +00:00
hast.conf.5 In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
hast.h In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
hastd.8 mdoc: move remaining sections into consistent order 2010-05-13 12:08:11 +00:00
hastd.c Before handling any events on descriptors check signals so we can update 2011-03-21 15:29:20 +00:00
hastd.h Add function to assert that the only descriptors we have open are the ones 2011-01-28 21:56:47 +00:00
hooks.c Increase debug level of "Checking hooks." message. 2011-03-21 14:53:27 +00:00
hooks.h hook_check() is now only used to report about long-running hooks, so the 2010-10-04 21:43:06 +00:00
lzf.c Allow to compress on-the-wire data using two algorithms: 2011-03-06 23:09:33 +00:00
lzf.h Allow to compress on-the-wire data using two algorithms: 2011-03-06 23:09:33 +00:00
Makefile - Turn on printf extentions. 2011-03-07 10:38:18 +00:00
metadata.c Plug memory leaks. 2010-06-14 21:25:20 +00:00
metadata.h
nv.c Add nv_assert() which allows to assert that the given name exists. 2011-01-22 22:38:18 +00:00
nv.h Add nv_assert() which allows to assert that the given name exists. 2011-01-22 22:38:18 +00:00
parse.y In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
pjdlog.c Unbreak the build. 2011-03-07 19:54:51 +00:00
pjdlog.h Rename pjdlog_verify() to pjdlog_abort() as it better describes what the 2011-01-31 15:52:00 +00:00
primary.c When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
proto_common.c Remove #include needed for debugging. 2011-03-15 13:53:39 +00:00
proto_impl.h In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
proto_socketpair.c In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
proto_tcp4.c In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
proto_uds.c In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
proto.c In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
proto.h In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00
rangelock.c
rangelock.h
secondary.c When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
subr.c When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
subr.h When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
synch.h Plug memory leaks. 2010-10-24 15:41:23 +00:00
token.l In hast.conf we define the other node's address in 'remote' variable. 2011-03-21 08:54:59 +00:00