opnsense-src/lib/libcasper/services/Makefile

# $FreeBSD$

SUBDIR=		cap_dns
SUBDIR+=	cap_grp
SUBDIR+=	cap_pwd
SUBDIR+=	cap_random
SUBDIR+=	cap_sysctl

SUBDIR_PARALLEL=

.include <bsd.subdir.mk>
Convert casperd(8) daemon to the libcasper. After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277 2016-02-25 13:23:40 -05:00			`# $FreeBSD$`

			`SUBDIR= cap_dns`
			`SUBDIR+= cap_grp`
			`SUBDIR+= cap_pwd`
			`SUBDIR+= cap_random`
			`SUBDIR+= cap_sysctl`

These can build in parallel. Sponsored by: EMC / Isilon Storage Division 2016-02-26 17:14:04 -05:00			`SUBDIR_PARALLEL=`

Convert casperd(8) daemon to the libcasper. After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277 2016-02-25 13:23:40 -05:00			`.include <bsd.subdir.mk>`