en Copyright 2025 Java http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/usr.sbin/rtsold/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#04e9edb5442826a14616157962361ff81e4a38fe Capsicumize rtsol(8) and rtsold(8).These programs parse ND6 Router Advertisement messages; rtsold(8) hasrequired an SA, SA-14:20.rtsold, for a bug in this code. Thus, theyare good candidates for sandboxing.The approach taken is to run the main executable in capability modeand use Casper services to provide functionality that cannot beimplemented within the sandbox. In particular, several custom serviceswere required.- A Casper service is used to send Router Solicitation messages on a raw ICMP6 socket. Initially I took the approach of creating a socket for each interface upon startup, and connect(2)ing it to the all-routers multicast group for the interface. This permits the use of sendmsg(2) in capability mode, but only works if the interface's link is up when rtsol(d) starts. So, instead, the rtsold.sendmsg service is used to transmit RS messages on behalf of the main process. One could alternately define a service which simply creates and connects a socket for each destination address, and returns the socket to the sandboxed process. However, to implement rtsold's -m option we also need to read the ND6 default router list, and this cannot be done in capability mode.- rtsold may execute resolvconf(8) in response to RDNSS and DNSSL options in received RA messages. A Casper service is used to fork and exec resolvconf(8), and to reap the child process.- A service is used to determine whether a given interface's link-local address is useable (i.e., not duplicated or undergoing DAD). This information is supplied by getifaddrs(3), which reads a sysctl not available in capability mode. The SIOCGIFCONF socket ioctl provides equivalent information and can be used in capability mode, but I decided against it for now because of some limitations of that interface.In addition to these new services, cap_syslog(3) is used to sendmessages to syslogd.Reviewed by: oshogboTested by: bz (previous versions)MFC after: 2 monthsSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D17572 List of files: /src/usr.sbin/rtsold/Makefile Sat, 05 Jan 2019 16:05:39 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/usr.sbin/rtsold/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#04e9edb5442826a14616157962361ff81e4a38fe Capsicumize rtsol(8) and rtsold(8).These programs parse ND6 Router Advertisement messages; rtsold(8) hasrequired an SA, SA-14:20.rtsold, for a bug in this code. Thus, theyare good candidates for sandboxing.The approach taken is to run the main executable in capability modeand use Casper services to provide functionality that cannot beimplemented within the sandbox. In particular, several custom serviceswere required.- A Casper service is used to send Router Solicitation messages on a raw ICMP6 socket. Initially I took the approach of creating a socket for each interface upon startup, and connect(2)ing it to the all-routers multicast group for the interface. This permits the use of sendmsg(2) in capability mode, but only works if the interface's link is up when rtsol(d) starts. So, instead, the rtsold.sendmsg service is used to transmit RS messages on behalf of the main process. One could alternately define a service which simply creates and connects a socket for each destination address, and returns the socket to the sandboxed process. However, to implement rtsold's -m option we also need to read the ND6 default router list, and this cannot be done in capability mode.- rtsold may execute resolvconf(8) in response to RDNSS and DNSSL options in received RA messages. A Casper service is used to fork and exec resolvconf(8), and to reap the child process.- A service is used to determine whether a given interface's link-local address is useable (i.e., not duplicated or undergoing DAD). This information is supplied by getifaddrs(3), which reads a sysctl not available in capability mode. The SIOCGIFCONF socket ioctl provides equivalent information and can be used in capability mode, but I decided against it for now because of some limitations of that interface.In addition to these new services, cap_syslog(3) is used to sendmessages to syslogd.Reviewed by: oshogboTested by: bz (previous versions)MFC after: 2 monthsSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D17572 List of files: /src/usr.sbin/rtsold/Makefile Sat, 05 Jan 2019 16:05:39 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#11d38a5764295585a2472d5e861fa8abe1a11eb2 Merge from headSponsored by: Gandi.net List of files: /src/usr.sbin/rtsold/Makefile Wed, 28 Oct 2015 11:58:18 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#becbad1f6e18fec7c3bf286778a766ffca4457be Merge from head List of files: /src/usr.sbin/rtsold/Makefile Tue, 13 Oct 2015 19:44:36 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#a997b777b107c49f8d4d307bee9d25c8ff1a749a Sync up with head up to r289211. List of files: /src/usr.sbin/rtsold/Makefile Tue, 13 Oct 2015 06:14:03 +0000 Navdeep Parhar <np@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#9be27fdc00bb8c7059ff388c089bb4f9092bf941 Merge from head List of files: /src/usr.sbin/rtsold/Makefile Fri, 09 Oct 2015 22:45:54 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#56160b2e676373344fc2f4edb9e7b4869cf74b7d Now that we own the code, use arc4random(3) unconditionallyand remove the corresponding HAVE_ARC4RANDOM conditions.MFC after: 2 weeks List of files: /src/usr.sbin/rtsold/Makefile Tue, 06 Oct 2015 23:42:58 +0000 Xin LI <delphij@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#0f405ee78f6bdc7dd6274d8fe8b5a21718a3b89e Sync up with head (up to r288341). List of files: /src/usr.sbin/rtsold/Makefile Mon, 28 Sep 2015 17:30:07 +0000 Navdeep Parhar <np@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#f94594b37a145b9b3e9ff31af2cd1dc3de8aa4d4 Finish merging from head, messed up in previous attempt List of files: /src/usr.sbin/rtsold/Makefile Sat, 12 Sep 2015 12:03:02 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#0e1e5c22c20e636264ff1284083c6af7a1b282cb Merge ^/head r287527 through r287679. List of files: /src/usr.sbin/rtsold/Makefile Fri, 11 Sep 2015 17:20:03 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#f74237f5b6259ee85f1019b421681735de78b560 - Remove #ifdef HAVE_POLL_H.- Use nitems().MFC after: 3 days List of files: /src/usr.sbin/rtsold/Makefile Thu, 10 Sep 2015 06:40:28 +0000 Hiroki Sato <hrs@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#416ba5c74546f32a993436a99516d35008e9f384 Catch up with HEAD (r280229-r284686). List of files: /src/usr.sbin/rtsold/Makefile Mon, 22 Jun 2015 00:05:22 +0000 Navdeep Parhar <np@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#98e0ffaefb0f241cda3a72395d3be04192ae0d47 Merge sync of head List of files: /src/usr.sbin/rtsold/Makefile Wed, 27 May 2015 01:19:58 +0000 Simon J. Gerraty <sjg@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#7757a1b4dc60696d9a95137ee0a2accd4ee680f4 Merge from head List of files: /src/usr.sbin/rtsold/Makefile Sun, 03 May 2015 19:30:11 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#7263c8c0998402e9860a0865013fbec4ece98cd4 MFH: r280643-r281852Sponsored by: The FreeBSD Foundation List of files: /src/usr.sbin/rtsold/Makefile Wed, 22 Apr 2015 12:58:16 +0000 Glen Barber <gjb@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#933095dedc470198611601d601c282bea9f717ea rtsold does not need to link to libkvm List of files: /src/usr.sbin/rtsold/Makefile Thu, 09 Apr 2015 21:52:14 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#d899be7d43d8df9cb485af5705e2724165a461c7 Reintegrate head: r274132-r277384Sponsored by: The FreeBSD Foundation List of files: /src/usr.sbin/rtsold/Makefile Mon, 19 Jan 2015 16:15:12 +0000 Glen Barber <gjb@FreeBSD.org> http://opengrok.net:8080/history/src/usr.sbin/rtsold/Makefile#8f0ea33f2bbf3a6aa80235f0a02fa5f2780c2b17 Reintegrate head revisions r273096-r277147Sponsored by: The FreeBSD Foundation List of files: /src/usr.sbin/rtsold/Makefile Tue, 13 Jan 2015 21:29:24 +0000 Glen Barber <gjb@FreeBSD.org>