summaryrefslogtreecommitdiffstats
path: root/usr.sbin/vmd/proc.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Sync switchd(8) and vmd(8) with the latest proc.c changes. This syncrzalamena2016-11-161-6/+25
| | | | | | basically imports the imsg_flush() fix from reyk@ in httpd(8). ok reyk@
* Sync proc.c file vmd(8) and switchd(8).rzalamena2016-10-111-78/+90
| | | | | | | | | New changes: * Fix msgbuf_write() usage idiom; * Add context (function name) that fatal()ed; * Use less fds on startup; ok mlarkin@, reyk@
* Sync with httpd(8) proc file. Check for dup2() usage to avoid oldd == newdrzalamena2016-10-051-2/+8
| | | | | | and remove the CLOEXEC with fcntl() if necessary. ok reyk@
* Call setsid() to create a new session for the executed processes.reyk2016-10-051-1/+5
| | | | | From deraadt@ OK rzalamena@
* Add a new "priv" process that is responsible for ioctls and restrictedreyk2016-10-041-3/+9
| | | | | | | | | | | operations that aren't allowed under pledge. This is a companion to the "vmd" process that runs as root but with pledge. With the "priv" process, each new tap(4) interface now gets a description to indicate the vm, eg. "vm1-if0-myvm". For network configuration will be done by vmd/priv later. OK mlarkin@
* Implement fork+exec for vmd, using the same framework from httpd etc.reyk2016-09-291-187/+334
| | | | No objections from mlarkin@ sunil@
* Add imsg "peerid" to debug messages (only within -DDEBUG).reyk2015-12-071-5/+7
|
* Another imsg_read user I did miss in my EAGAIN rampage.claudio2015-12-051-2/+2
|
* Sync with relayd, fix previous use of proc_compose*_imsg()reyk2015-12-021-2/+16
|
* Add back the "peerid" to the proc_compose*() functions: in relayd, Ireyk2015-12-021-6/+6
| | | | | | initially left it out because I didn't have a need for it. But it is actually quite useful to carry a reference to the imsg data context across processes.
* Start tweaking vmd's privsep and daemon model by splitting the mainreyk2015-12-021-0/+632
process into multiple parts and adopting the "proc.c"-style from other daemons. This allows to further reduce the privileges, to give better pledge(2), and to add some upcoming changes. "please do" mlarkin@, deraadt@