Andreas Kling 26a31c7efb Kernel: Add "accept" pledge promise for accepting incoming connections ... This patch adds a new "accept" promise that allows you to call accept() on an already listening socket. This lets programs set up a socket for for listening and then dropping "inet" and/or "unix" so that only incoming (and existing) connections are allowed from that point on. No new outgoing connections or listening server sockets can be created. In addition to accept() it also allows getsockopt() with SOL_SOCKET and SO_PEERCRED, which is used to find the PID/UID/GID of the socket peer. This is used by our IPC library when creating shared buffers that should only be accessible to a specific peer process. This allows us to drop "unix" in WindowServer and LookupServer. :^) It also makes the debugging/introspection RPC sockets in CEventLoop based programs work again.		2020-01-17 11:19:06 +01:00
..
man1	Base: Move the modload and modunload command documentation to man8	2020-01-02 12:37:19 +01:00
man2	Kernel: Add "accept" pledge promise for accepting incoming connections	2020-01-17 11:19:06 +01:00
man3	Docs: Add note about EINVAL to isatty(3)	2019-11-17 20:09:12 +01:00
man5	SystemServer: Allow specifying per-service socket file permissions	2020-01-09 21:35:33 +01:00
man7	Base: Describe kernel modules, syscalls, and programs	2019-12-24 11:52:01 +01:00
man8	Base: Document new chroot abilities	2020-01-12 20:02:11 +01:00