Mariusz Zaborski 60f8236dd2 cap_net: do not allow new limits to drop keys from the old ones ... If the old limit had family/hosts/sockaddr set, the new limit must have them too. Before, a missing key in the new limit was treated as "allow any", which let a caller silently extend their limits. Approved by: so Security: FreeBSD-SA-26:24.cap_net Security: CVE-2026-45254 Reported by: Joshua Rogers of AISLE Research Team Reviewed by: markj MFC after: 1 day Differential Revision: https://reviews.freebsd.org/D56991 (cherry picked from commit d705a519525f2acae3c1efba11436ec6ee8aea0a) (cherry picked from commit b79faca1c5964d89c125d02de35928b733041f3f)		2026-05-21 07:32:58 +02:00
..
libcasper	libcasper: switch from select(2) to poll(2)	2026-05-21 07:32:55 +02:00
services	cap_net: do not allow new limits to drop keys from the old ones	2026-05-21 07:32:58 +02:00
tests	libcasper: switch from select(2) to poll(2)	2026-05-21 07:32:55 +02:00
Makefile	Remove $FreeBSD$: one-line sh pattern	2023-08-16 11:55:03 -06:00
Makefile.inc	Remove $FreeBSD$: one-line sh pattern	2023-08-16 11:55:03 -06:00