[Bug 2140] Capsicum support for FreeBSD 10 (-current)

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2140

--- Comment #25 from Loganaden Velvindron <loganaden at gmail.com> ---
As discussed with pjd at FreeBSD:

There's an issue on FreeBSD where a CRIOGET ioctl is failing due to
setrlimit applied with NOFILE.

The commit message is not correct.

From:
http://svnweb.freebsd.org/base/head/crypto/openssh/servconf.c?view=log&pathrev=251088

Revert a local change that sets the default for UsePrivilegeSeparation
to
"sandbox" instead of "yes".  In sandbox mode, the privsep child is
unable
to load additional libraries and will therefore crash when trying to
take
advantage of crypto offloading on CPUs that support it.

So comment it for now.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.