Mariusz Zaborski 5a135f8b45 cap_net: do not allow new limits to drop keys from the old ones ... If the old limit had family/hosts/sockaddr set, the new limit must have them too. Before, a missing key in the new limit was treated as "allow any", which let a caller silently extend their limits. Approved by: re Approved by: so Security: FreeBSD-SA-26:24.cap_net Security: CVE-2026-45254 Reported by: Joshua Rogers of AISLE Research Team Reviewed by: markj MFC after: 1 day Differential Revision: https://reviews.freebsd.org/D56991 (cherry picked from commit d705a519525f2acae3c1efba11436ec6ee8aea0a) (cherry picked from commit 7eb3fd691d64dd42f9d32e04cb9b5811fd7c8e55)		2026-05-20 13:52:39 +00:00
..
libcasper	libcasper: switch from select(2) to poll(2)	2026-05-20 13:52:00 +00:00
services	cap_net: do not allow new limits to drop keys from the old ones	2026-05-20 13:52:39 +00:00
tests	libcasper: switch from select(2) to poll(2)	2026-05-20 13:52:00 +00:00
Makefile	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
Makefile.inc	libcasper: Move everything to the libcasper package	2025-11-05 21:27:46 +00:00