Hi,
What is the intended behavior of sendto() with non-NULL destination
when the capability mode is enabled?
If the capability mode is *not* enabled, it is checked against
CAP_CONNECT in kern_sendit() @ uipc_syscall.c.
This matches the explanation in the rights(4) manual page.
However, if the capability mode is enabled, it is always
rejected in sendit(). Is this intended?
Best regards,
Ken
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"