diff options
| author | Roy Marples <roy@marples.name> | 2020-05-19 16:19:05 +0100 |
|---|---|---|
| committer | Roy Marples <roy@marples.name> | 2020-05-19 16:19:05 +0100 |
| commit | c5445ce8235c153f4f184067ef58249f598d8629 (patch) | |
| tree | b16a5c64baf8b7e6ecfcf1f09cf38d13aa68ff09 /src/privsep.h | |
| parent | d2fec927e001f2430bb8d5127403968f23b9c316 (diff) | |
| download | dhcpcd-c5445ce8235c153f4f184067ef58249f598d8629.tar.xz | |
privsep: Enable Capsicum for all processes.
Except for the priviledged process.
This is quite an in-depth change:
* ARP is now one process per address
* BPF flags are now returned via privsep
* BPF write filters are locked when supported
* The root process sends to the network
The last step is done by opening RAW sockets and then sending a UDP
header (where applicable) to avoid binding to an address
which is already in use by the reader sockets.
This is slightly wasteful for OS's without sandboxing but does
have the very nice side effect of not needing a source address
to unicast DHCPs replies from which makes the code smaller.
Diffstat (limited to 'src/privsep.h')
| -rw-r--r-- | src/privsep.h | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/privsep.h b/src/privsep.h index 7fb5ca9b..b98813e5 100644 --- a/src/privsep.h +++ b/src/privsep.h @@ -40,7 +40,6 @@ #define PS_DHCP6 0x0003 #define PS_BPF_BOOTP 0x0004 #define PS_BPF_ARP 0x0005 -#define PS_BPF_ARP_ADDR 0x0006 /* Generic commands */ #define PS_IOCTL 0x0010 @@ -62,7 +61,6 @@ #define PS_WRITEPATHUINT 0x0201 /* Process commands */ -#define PS_DELETE 0x2000 #define PS_START 0x4000 #define PS_STOP 0x8000 @@ -119,6 +117,7 @@ struct ps_msg { uint8_t psm_data[PS_BUFLEN]; }; +struct bpf; struct ps_process { TAILQ_ENTRY(ps_process) next; struct dhcpcd_ctx *psp_ctx; @@ -132,8 +131,9 @@ struct ps_process { const char *psp_protostr; #ifdef INET - int (*psp_filter)(struct interface *, int); + int (*psp_filter)(const struct bpf *, const struct in_addr *); struct interface psp_ifp; /* Move BPF gubbins elsewhere */ + struct bpf *psp_bpf; #endif }; TAILQ_HEAD(ps_process_head, ps_process); |