2 * Copyright (c) 2013 The FreeBSD Foundation
5 * This software was developed by Pawel Jakub Dawidek under sponsorship from
6 * the FreeBSD Foundation.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 #include <sys/cdefs.h>
31 __FBSDID("$FreeBSD$");
41 #include "libcapsicum.h"
42 #include "libcapsicum_impl.h"
43 #include "libcapsicum_service.h"
46 cap_service_open(const cap_channel_t *chan, const char *name)
48 cap_channel_t *newchan;
54 nvl = nvlist_create(0);
55 nvlist_add_string(nvl, "cmd", "open");
56 nvlist_add_string(nvl, "service", name);
57 if (fd_is_valid(STDERR_FILENO))
58 nvlist_add_descriptor(nvl, "stderrfd", STDERR_FILENO);
59 nvl = cap_xfer_nvlist(chan, nvl);
62 error = (int)nvlist_get_number(nvl, "error");
68 sock = nvlist_take_descriptor(nvl, "chanfd");
72 if (cred_send(sock) == -1)
74 newchan = cap_wrap(sock);
86 cap_service_limit(const cap_channel_t *chan, const char * const *names,
92 limits = nvlist_create(0);
93 for (i = 0; i < nnames; i++)
94 nvlist_add_null(limits, names[i]);
95 return (cap_limit_set(chan, limits));