[Bug 2140] Capsicum support for FreeBSD 10 (-current)

bugzilla-daemon at natsu.mindrot.org bugzilla-daemon at natsu.mindrot.org
Wed Oct 23 14:25:56 EST 2013


https://bugzilla.mindrot.org/show_bug.cgi?id=2140

--- Comment #9 from Damien Miller <djm at mindrot.org> ---
Comment on attachment 2364
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2364
capsicum

>+struct ssh_sandbox {
>+	struct monitor *monitor;
>+	pid_t child_pid;
>+};
>+
>+extern struct monitor *pmonitor;
>+struct ssh_sandbox *
>+ssh_sandbox_init(void)
>+{
>+	struct ssh_sandbox *box;
>+
>+	/*
>+	 * Strictly, we don't need to maintain any state here but we need
>+	 * to return non-NULL to satisfy the API.
>+	 */
>+	debug3("%s: preparing capsicum sandbox", __func__);
>+	box = xcalloc(1, sizeof(*box));
>+	box->monitor = pmonitor;

I think it would be a better idea to just record the fd numbers
themselves in the struct rather than the monitor address.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list