3 commits

Author	SHA1	Message	Date
Mariusz Zaborski	77ebcc05ea	libcasper: do not fail if Capsicum is not avilable ... Casper service can be also used on the kernels without Capsicum support. Reported by: sbruno Tested by: sbruno	2018-11-30 19:27:14 +00:00
Mariusz Zaborski	2607c01b66	Fix typo in the comparison. ... This fix build with gcc. Reported by: jenkins	2018-11-12 18:37:31 +00:00
Mariusz Zaborski	cdd6ea94b0	libcasper: introduce cap_fileargs service ... cap_fileargs is a Casper service which helps to sandbox applications that need access to the filesystem namespace. The main purpose of the service is to make easy to capsicumize applications that works on multiple files passed in argv. We have a couple example of using it but we still treat this service as an experimental one. Reviewed by: emsate (previous version), jonathan (partially) Discussed with: many Differential Revision: https://reviews.freebsd.org/D14407	2018-11-12 17:40:47 +00:00