#!/bin/bash # -*- coding: utf-8 -*- # # nacl_build.sh -- NaCl library build script # # Copyright (C) 2011 Daniel Borkmann # Copyright (C) 2009-2011 Emmanuel Roullit # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2 as # published by the Free Software Foundation. cc="gcc" nacl_dir="/tmp" nacl_version="nacl-20110221" nacl_suffix="tar.bz2" nacl_base_url="http://hyperelliptic.org/nacl" nacl_path="$nacl_dir/$nacl_version.$nacl_suffix" nacl_build_dir="$1" if test -z "$nacl_build_dir"; then echo "Please input the path where NaCl should be build" exit 1 fi if ! test -d "$nacl_build_dir"; then mkdir "$nacl_build_dir" fi wget -O "$nacl_path" "$nacl_base_url/$nacl_version.$nacl_suffix" tar xjf "$nacl_path" -C "$nacl_build_dir" $cc -Wall -O2 ./abiname.c -o ./abiname arch="`./abiname`" shorthostname=$(hostname | sed 's/\..*//' | tr -cd '[a-z][A-Z][0-9]') echo "Building NaCl for arch $arch on host $shorthostname (grab a coffee, this takes a while) ..." cd "$nacl_build_dir"/"$nacl_version" ./do cd $OLDPWD > /dev/null nacl_lib_path="$nacl_build_dir/$nacl_version/build/$shorthostname/lib/$arch" nacl_include_path="$nacl_build_dir/$nacl_version/build/$shorthostname/include/$arch" echo "NaCl lib path $nacl_lib_path" echo "NaCl include path $nacl_include_path" ./nacl_path.sh "$nacl_include_path" "$nacl_lib_path" echo "Done!" '>Tobias Klauser
summaryrefslogtreecommitdiff
path: root/net/core/sysctl_net_core.c
diff options
context:
space:
mode:
authorEric W. Biederman <ebiederm@xmission.com>2012-11-16 03:02:59 +0000
committerDavid S. Miller <davem@davemloft.net>2012-11-18 20:30:55 -0500
commit464dc801c76aa0db88e16e8f5f47c6879858b9b2 (patch)
treecfaf0f43f4ce50669f07031ec42062b4c9a7f985 /net/core/sysctl_net_core.c
parent73f7ef435934e952c1d70d83d69921ea5d1f6bd4 (diff)
net: Don't export sysctls to unprivileged users
In preparation for supporting the creation of network namespaces by unprivileged users, modify all of the per net sysctl exports and refuse to allow them to unprivileged users. This makes it safe for unprivileged users in general to access per net sysctls, and allows sysctls to be exported to unprivileged users on an individual basis as they are deemed safe. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/core/sysctl_net_core.c')