mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-12-26 13:05:18 +01:00
c501d73c7e
After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277
75 lines
2.5 KiB
C
75 lines
2.5 KiB
C
/*-
|
|
* Copyright 1996, 1997, 1998, 1999, 2000 John D. Polstra.
|
|
* Copyright 2003 Alexander Kabaev <kan@FreeBSD.ORG>.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
* $FreeBSD$
|
|
*/
|
|
|
|
#ifndef PATHS_H
|
|
#define PATHS_H
|
|
|
|
#undef _PATH_ELF_HINTS
|
|
|
|
#ifdef COMPAT_32BIT
|
|
#define _PATH_ELF_HINTS "/var/run/ld-elf32.so.hints"
|
|
#define _PATH_LIBMAP_CONF "/etc/libmap32.conf"
|
|
#define _PATH_RTLD "/libexec/ld-elf32.so.1"
|
|
#define STANDARD_LIBRARY_PATH "/lib32:/usr/lib32"
|
|
#define LD_ "LD_32_"
|
|
#endif
|
|
|
|
#ifndef _PATH_ELF_HINTS
|
|
#define _PATH_ELF_HINTS "/var/run/ld-elf.so.hints"
|
|
#endif
|
|
|
|
#ifndef _PATH_LIBMAP_CONF
|
|
#define _PATH_LIBMAP_CONF "/etc/libmap.conf"
|
|
#endif
|
|
|
|
#ifndef _PATH_RTLD
|
|
#define _PATH_RTLD "/libexec/ld-elf.so.1"
|
|
#endif
|
|
|
|
#ifndef STANDARD_LIBRARY_PATH
|
|
#define STANDARD_LIBRARY_PATH "/lib/casper:/lib:/usr/lib"
|
|
#endif
|
|
|
|
#ifndef LD_
|
|
#define LD_ "LD_"
|
|
#endif
|
|
|
|
#define _PATH_SOFT_ELF_HINTS "/var/run/ld-elf-soft.so.hints"
|
|
#define _PATH_SOFT_LIBMAP_CONF "/etc/libmap-soft.conf"
|
|
#define _PATH_SOFT_RTLD "/libexec/ld-elf.so.1"
|
|
#define SOFT_STANDARD_LIBRARY_PATH "/usr/libsoft"
|
|
#define LD_SOFT_ "LD_SOFT_"
|
|
|
|
extern char *ld_elf_hints_default;
|
|
extern char *ld_path_libmap_conf;
|
|
extern char *ld_path_rtld;
|
|
extern char *ld_standard_library_path;
|
|
extern char *ld_env_prefix;
|
|
|
|
#endif /* PATHS_H */
|