mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-02-01 03:53:33 +00:00
5a132f9652
It's now possible to pass the `-S` or `-SS` flags to sandbox redbean worker proecsses after they've been forked. The first `-S` flag is intended to be a permissive builtin policy that limits system calls to only that which the various parts of redbean serving need. The second `-SS` flag is intended to be more restrictive, preventing things like the Lua extensions you download off the web from using the HTTP client or sockets APIs. In upcoming changes you'll be able to implement your own Berkeley Packet Filter sandbox programs and load them via Lua.
45 lines
1.2 KiB
C
45 lines
1.2 KiB
C
#ifndef COSMOPOLITAN_LIBC_SYSV_CONSTS_LOG_H_
|
|
#define COSMOPOLITAN_LIBC_SYSV_CONSTS_LOG_H_
|
|
|
|
#define LOG_MASK(pri) (1 << (pri))
|
|
#define LOG_UPTO(pri) ((1 << ((pri) + 1)) - 1)
|
|
|
|
#define LOG_EMERG 0
|
|
#define LOG_KERN 0
|
|
#define LOG_ALERT 1
|
|
#define LOG_PID 1
|
|
#define LOG_CONS 2
|
|
#define LOG_CRIT 2
|
|
#define LOG_ERR 3
|
|
#define LOG_ODELAY 4
|
|
#define LOG_WARNING 4
|
|
#define LOG_NOTICE 5
|
|
#define LOG_INFO 6
|
|
#define LOG_DEBUG 7
|
|
#define LOG_PRIMASK 7
|
|
#define LOG_NDELAY 8
|
|
#define LOG_USER 8
|
|
#define LOG_MAIL 16
|
|
#define LOG_NOWAIT 16
|
|
#define LOG_DAEMON 24
|
|
#define LOG_NFACILITIES 24
|
|
#define LOG_AUTH 32
|
|
#define LOG_PERROR 32
|
|
#define LOG_SYSLOG 40
|
|
#define LOG_LPR 48
|
|
#define LOG_NEWS 56
|
|
#define LOG_UUCP 64
|
|
#define LOG_CRON 72
|
|
#define LOG_SELECT 76
|
|
#define LOG_SENSE 77
|
|
#define LOG_LOCAL0 128
|
|
#define LOG_LOCAL1 136
|
|
#define LOG_LOCAL2 144
|
|
#define LOG_LOCAL3 152
|
|
#define LOG_LOCAL4 160
|
|
#define LOG_LOCAL5 168
|
|
#define LOG_LOCAL6 176
|
|
#define LOG_LOCAL7 184
|
|
#define LOG_FACMASK 0x03f8
|
|
|
|
#endif /* COSMOPOLITAN_LIBC_SYSV_CONSTS_LOG_H_ */
|