Re: Capsicum and sendto(2)

2014-01-22 Thread KAMADA Ken'ichi
At Tue, 21 Jan 2014 12:21:50 -0600, Brooks Davis wrote: > > On Tue, Jan 21, 2014 at 10:45:11PM +0900, KAMADA Ken'ichi wrote: > > > > What is the intended behavior of sendto() with non-NULL destination > > when the capability mode is enabled? > > > > If the capability mode is *not* enabled, it is

Re: Capsicum and sendto(2)

2014-01-21 Thread Brooks Davis
On Tue, Jan 21, 2014 at 10:45:11PM +0900, KAMADA Ken'ichi wrote: > Hi, > > What is the intended behavior of sendto() with non-NULL destination > when the capability mode is enabled? > > If the capability mode is *not* enabled, it is checked against > CAP_CONNECT in kern_sendit() @ uipc_syscall.c.

Capsicum and sendto(2)

2014-01-21 Thread KAMADA Ken'ichi
Hi, What is the intended behavior of sendto() with non-NULL destination when the capability mode is enabled? If the capability mode is *not* enabled, it is checked against CAP_CONNECT in kern_sendit() @ uipc_syscall.c. This matches the explanation in the rights(4) manual page. However, if the ca