mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-29 20:54:13 +01:00
990beb037d
The goal here is to make it so applications can take the rights one would
normally get by calling caph_limit_stream() on a descriptor and build on
them as needed.
The tentatively planned use-case is an application that takes a socket and
hooks it up to std{err,out,in} for a fork()d child. It may be feasible to
apply limitations to such descriptors as long as it's a superset of those
normally applied to stdio.
Reviewed by: markj, oshobo (prior version; sans manpage addition)
Differential Revision: https://reviews.freebsd.org/D22993
22 lines
693 B
Makefile
22 lines
693 B
Makefile
# $FreeBSD$
|
|
|
|
INCS= capsicum_helpers.h
|
|
|
|
MAN+= capsicum_helpers.3
|
|
|
|
MLINKS+=capsicum_helpers.3 caph_enter.3
|
|
MLINKS+=capsicum_helpers.3 caph_enter_casper.3
|
|
MLINKS+=capsicum_helpers.3 caph_stream_rights.3
|
|
MLINKS+=capsicum_helpers.3 caph_rights_limit.3
|
|
MLINKS+=capsicum_helpers.3 caph_fcntls_limit.3
|
|
MLINKS+=capsicum_helpers.3 caph_ioctls_limit.3
|
|
MLINKS+=capsicum_helpers.3 caph_limit_stream.3
|
|
MLINKS+=capsicum_helpers.3 caph_limit_stdin.3
|
|
MLINKS+=capsicum_helpers.3 caph_limit_stderr.3
|
|
MLINKS+=capsicum_helpers.3 caph_limit_stdout.3
|
|
MLINKS+=capsicum_helpers.3 caph_limit_stdio.3
|
|
MLINKS+=capsicum_helpers.3 caph_cache_tzdata.3
|
|
MLINKS+=capsicum_helpers.3 caph_cache_catpages.3
|
|
|
|
.include <bsd.lib.mk>
|