Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2)

[RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · David Drysdale <hidden> · 2014-06-30
[PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Christoph Hellwig <hch@infradead.org> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Meredydd Luff <hidden> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Christoph Hellwig <hch@infradead.org> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Meredydd Luff <hidden> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Christoph Hellwig <hch@infradead.org> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Christoph Hellwig <hch@infradead.org> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · David Drysdale <hidden> · 2014-07-08
Re: [PATCH 01/11] fs: add O_BENEATH_ONLY flag to openat(2) · Christoph Hellwig <hch@infradead.org> · 2014-07-09
[PATCH 02/11] selftests: Add test of O_BENEATH_ONLY & openat(2) · David Drysdale <hidden> · 2014-06-30
[PATCH 10/11] capsicum: invocation of new LSM hooks · David Drysdale <hidden> · 2014-06-30
[PATCH 2/5] man-pages: capsicum.7: describe Capsicum capability framework · David Drysdale <hidden> · 2014-06-30
[PATCH 4/5] man-pages: cap_rights_limit.2: limit FD rights for Capsicum · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 4/5] man-pages: cap_rights_limit.2: limit FD rights for Capsicum · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [PATCH 4/5] man-pages: cap_rights_limit.2: limit FD rights for Capsicum · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 4/5] man-pages: cap_rights_limit.2: limit FD rights for Capsicum · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [PATCH 4/5] man-pages: cap_rights_limit.2: limit FD rights for Capsicum · David Drysdale <hidden> · 2014-06-30
[PATCH 5/5] man-pages: cap_rights_get: retrieve Capsicum fd rights · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 5/5] man-pages: cap_rights_get: retrieve Capsicum fd rights · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [PATCH 5/5] man-pages: cap_rights_get: retrieve Capsicum fd rights · David Drysdale <hidden> · 2014-07-01
Re: [PATCH 5/5] man-pages: cap_rights_get: retrieve Capsicum fd rights · Andy Lutomirski <luto@amacapital.net> · 2014-07-01
[PATCH 3/5] man-pages: rights.7: Describe Capsicum primary rights · David Drysdale <hidden> · 2014-06-30
[PATCH 05/11] capsicum: convert callers to use fgetr() etc · David Drysdale <hidden> · 2014-06-30
[PATCH 03/11] capsicum: rights values and structure definitions · David Drysdale <hidden> · 2014-06-30
[PATCH 07/11] capsicum: convert callers to use sockfd_lookupr() etc · David Drysdale <hidden> · 2014-06-30
[PATCH 04/11] capsicum: implement fgetr() and friends · David Drysdale <hidden> · 2014-06-30
[PATCH 09/11] capsicum: implementations of new LSM hooks · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 09/11] capsicum: implementations of new LSM hooks · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [PATCH 09/11] capsicum: implementations of new LSM hooks · Paul Moore <paul@paul-moore.com> · 2014-07-02
Re: [PATCH 09/11] capsicum: implementations of new LSM hooks · David Drysdale <hidden> · 2014-07-02
[PATCH 06/11] capsicum: implement sockfd_lookupr() · David Drysdale <hidden> · 2014-06-30
[PATCH 08/11] capsicum: add new LSM hooks on FD/file conversion · David Drysdale <hidden> · 2014-06-30
[PATCH 11/11] capsicum: add syscalls to limit FD rights · David Drysdale <hidden> · 2014-06-30
[PATCH 1/5] man-pages: open.2: describe O_BENEATH_ONLY flag · David Drysdale <hidden> · 2014-06-30
Re: [PATCH 1/5] man-pages: open.2: describe O_BENEATH_ONLY flag · Andy Lutomirski <luto@amacapital.net> · 2014-06-30
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Paolo Bonzini <pbonzini@redhat.com> · 2014-07-03
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Loganaden Velvindron <hidden> · 2014-07-03
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · David Drysdale <hidden> · 2014-07-03
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Paolo Bonzini <pbonzini@redhat.com> · 2014-07-04
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · David Drysdale <hidden> · 2014-07-07
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Paolo Bonzini <pbonzini@redhat.com> · 2014-07-07
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · David Drysdale <hidden> · 2014-07-07
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Alexei Starovoitov <hidden> · 2014-07-07
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Kees Cook <hidden> · 2014-07-08
Re: [RFC PATCH 00/11] Adding FreeBSD's Capsicum security framework (part 1) · Pavel Machek <hidden> · 2014-08-16

From: Christoph Hellwig <hidden>
Date: 2014-07-08 12:03:33
Also in: lkml

On Mon, Jun 30, 2014 at 11:28:01AM +0100, David Drysdale wrote:

Add a new O_BENEATH_ONLY flag for openat(2) which restricts the
provided path, rejecting (with -EACCES) paths that are not beneath
the provided dfd.  In particular, reject:
 - paths that contain .. components
 - paths that begin with /
 - symlinks that have paths as above.


How is this implemented in FreeBSD?  I can't find any references to
O_BENEATH_ONLY except for your patchset.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help