Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.


 166                 }
 167 
 168 <INITIAL>verify   {
 169                         BEGIN TSTATE;
 170                         state = TSTATE;
 171                         return VERIFY;
 172                 }
 173 
 174 <TSTATE>net       { return NET; }
 175 
 176 <TSTATE>fs        { return FS; }
 177 
 178 <TSTATE>device    { return DEVICE; }
 179 
 180 <TSTATE>rctl      { return RCTL; }
 181 
 182 <TSTATE>attr      { return ATTR; }
 183 
 184 <TSTATE>admin     { return ADMIN; }
 185 


 186 <TSTATE>zonename  { return ZONENAME; }
 187 <CSTATE>zonename  { return ZONENAME; }
 188 
 189 <TSTATE>dataset   { return DATASET; }
 190 
 191 <TSTATE>dedicated-cpu     { return PSET; }
 192 
 193 <TSTATE>capped-cpu        { return PCAP; }
 194 
 195 <TSTATE>capped-memory     { return MCAP; }
 196 
 197 <TSTATE>zonepath  { return ZONEPATH; }
 198 <CSTATE>zonepath  { return ZONEPATH; }
 199 
 200 <TSTATE>brand     { return BRAND; }
 201 <CSTATE>brand     { return BRAND; }
 202 
 203 <TSTATE>autoboot  { return AUTOBOOT; }
 204 <CSTATE>autoboot  { return AUTOBOOT; }
 205 


 291 <CSTATE>max-msg-ids       { return MAXMSGIDS; }
 292 
 293 <TSTATE>max-sem-ids       { return MAXSEMIDS; }
 294 <CSTATE>max-sem-ids       { return MAXSEMIDS; }
 295 
 296 <TSTATE>scheduling-class  { return SCHED; }
 297 <CSTATE>scheduling-class  { return SCHED; }
 298 
 299 <TSTATE>hostid            { return HOSTID; }
 300 <CSTATE>hostid            { return HOSTID; }
 301 
 302 <TSTATE>user      { return USER; }
 303 <CSTATE>user      { return USER; }
 304 
 305 <TSTATE>auths     { return AUTHS; }
 306 <CSTATE>auths     { return AUTHS; }
 307 
 308 <TSTATE>fs-allowed        { return FS_ALLOWED; }
 309 <CSTATE>fs-allowed        { return FS_ALLOWED; }
 310 









 311 <TSTATE>= { return EQUAL; }
 312 <LSTATE>= { return EQUAL; }
 313 <CSTATE>= { return EQUAL; }
 314 
 315 <TSTATE>"["       {
 316                         BEGIN LSTATE;
 317                         state = LSTATE;
 318                         return OPEN_SQ_BRACKET;
 319                 }
 320 
 321 <LSTATE>"]"       {
 322                         BEGIN TSTATE;
 323                         state = TSTATE;
 324                         return CLOSE_SQ_BRACKET;
 325                 }
 326 
 327 <TSTATE>"("       {
 328                         BEGIN CSTATE;
 329                         return OPEN_PAREN;
 330                 }




 166                 }
 167 
 168 <INITIAL>verify   {
 169                         BEGIN TSTATE;
 170                         state = TSTATE;
 171                         return VERIFY;
 172                 }
 173 
 174 <TSTATE>net       { return NET; }
 175 
 176 <TSTATE>fs        { return FS; }
 177 
 178 <TSTATE>device    { return DEVICE; }
 179 
 180 <TSTATE>rctl      { return RCTL; }
 181 
 182 <TSTATE>attr      { return ATTR; }
 183 
 184 <TSTATE>admin     { return ADMIN; }
 185 
 186 <TSTATE>security-flags { return SECFLAGS; }
 187 
 188 <TSTATE>zonename  { return ZONENAME; }
 189 <CSTATE>zonename  { return ZONENAME; }
 190 
 191 <TSTATE>dataset   { return DATASET; }
 192 
 193 <TSTATE>dedicated-cpu     { return PSET; }
 194 
 195 <TSTATE>capped-cpu        { return PCAP; }
 196 
 197 <TSTATE>capped-memory     { return MCAP; }
 198 
 199 <TSTATE>zonepath  { return ZONEPATH; }
 200 <CSTATE>zonepath  { return ZONEPATH; }
 201 
 202 <TSTATE>brand     { return BRAND; }
 203 <CSTATE>brand     { return BRAND; }
 204 
 205 <TSTATE>autoboot  { return AUTOBOOT; }
 206 <CSTATE>autoboot  { return AUTOBOOT; }
 207 


 293 <CSTATE>max-msg-ids       { return MAXMSGIDS; }
 294 
 295 <TSTATE>max-sem-ids       { return MAXSEMIDS; }
 296 <CSTATE>max-sem-ids       { return MAXSEMIDS; }
 297 
 298 <TSTATE>scheduling-class  { return SCHED; }
 299 <CSTATE>scheduling-class  { return SCHED; }
 300 
 301 <TSTATE>hostid            { return HOSTID; }
 302 <CSTATE>hostid            { return HOSTID; }
 303 
 304 <TSTATE>user      { return USER; }
 305 <CSTATE>user      { return USER; }
 306 
 307 <TSTATE>auths     { return AUTHS; }
 308 <CSTATE>auths     { return AUTHS; }
 309 
 310 <TSTATE>fs-allowed        { return FS_ALLOWED; }
 311 <CSTATE>fs-allowed        { return FS_ALLOWED; }
 312 
 313 <TSTATE>default { return DEFAULT; }
 314 <CSTATE>default { return DEFAULT; }
 315 
 316 <TSTATE>lower { return LOWER; }
 317 <CSTATE>lower { return LOWER; }
 318 
 319 <TSTATE>upper { return UPPER; }
 320 <CSTATE>upper { return UPPER; }
 321 
 322 <TSTATE>= { return EQUAL; }
 323 <LSTATE>= { return EQUAL; }
 324 <CSTATE>= { return EQUAL; }
 325 
 326 <TSTATE>"["       {
 327                         BEGIN LSTATE;
 328                         state = LSTATE;
 329                         return OPEN_SQ_BRACKET;
 330                 }
 331 
 332 <LSTATE>"]"       {
 333                         BEGIN TSTATE;
 334                         state = TSTATE;
 335                         return CLOSE_SQ_BRACKET;
 336                 }
 337 
 338 <TSTATE>"("       {
 339                         BEGIN CSTATE;
 340                         return OPEN_PAREN;
 341                 }