Re: capsicum and netmap ?

2014-09-29 Thread Luigi Rizzo
On Mon, Sep 29, 2014 at 06:53:08PM +, Brooks Davis wrote: > On Mon, Sep 29, 2014 at 08:20:08PM +0200, Luigi Rizzo wrote: ... > > The nm_open() (which includes open and mmap) occurs before the > > cap_enter() call, and poll() works fine until we do the > > cap_enter()/cap_sandboxed() calls. > >

Re: capsicum and netmap ?

2014-09-29 Thread Brooks Davis
On Mon, Sep 29, 2014 at 08:20:08PM +0200, Luigi Rizzo wrote: > On Mon, Sep 29, 2014 at 05:27:09PM +, Brooks Davis wrote: > > On Mon, Sep 29, 2014 at 05:30:43PM +0200, Luigi Rizzo wrote: > > > > > > Hi, > > > while trying the netmap-enabled libpcap library with tcpdump, i > > > noticed it fails

Re: capsicum and netmap ?

2014-09-29 Thread Luigi Rizzo
On Mon, Sep 29, 2014 at 05:27:09PM +, Brooks Davis wrote: > On Mon, Sep 29, 2014 at 05:30:43PM +0200, Luigi Rizzo wrote: > > > > Hi, > > while trying the netmap-enabled libpcap library with tcpdump, i > > noticed it fails to return data on a kernel with capsicum (the > > string "capability mod

Re: capsicum and netmap ?

2014-09-29 Thread Brooks Davis
On Mon, Sep 29, 2014 at 05:30:43PM +0200, Luigi Rizzo wrote: > > Hi, > while trying the netmap-enabled libpcap library with tcpdump, i > noticed it fails to return data on a kernel with capsicum (the > string "capability mode sandbox enabled" made me suspicious, and > removing the cap_*() calls fr

capsicum and netmap ?

2014-09-29 Thread Luigi Rizzo
Hi, while trying the netmap-enabled libpcap library with tcpdump, i noticed it fails to return data on a kernel with capsicum (the string "capability mode sandbox enabled" made me suspicious, and removing the cap_*() calls from tcpdump.c seems to make things work again). Would anyone be able to p