Skip to content

sniproxy 0.12.0

Choose a tag to compare

View all tags
@renaudallard renaudallard released this 12 Oct 16:16
· 685 commits to master since this release
0.12.0
4dfdb70

  • FreeBSD Capsicum sandboxing: mainloop, resolver, and logger processes
    enter capability mode after initialization. IPC sockets are restricted
    to minimum required rights. Config reload and log rotation use
    pre-opened directory fds with openat(). Binder is excluded (needs VFS
    for bind). Set SNIPROXY_DISABLE_CAPSICUM=1 to disable.

  • FreeBSD rc.d startup script (scripts/sniproxy.rc) for service
    management via rc.subr.

  • Build system fix: AC_CANONICAL_HOST was missing, so seccomp (Linux)
    and Capsicum (FreeBSD) were never detected. Also link libm for
    isfinite() on FreeBSD.

  • FreeBSD package added to release workflow.

Assets 27
Loading