K 10 svn:author V 7 rwatson K 8 svn:date V 27 2010-02-02T20:49:48.812146Z K 7 svn:log V 914 Merge c174156, c174157, c174160, c174162, c174163, c174164 from the p4 TrustedBSD Capabilities branch to capabilities8: Style tweaks. Revert to using an anonymous POSIX shared memory segment to pass fdlist information from the sandbox host into the sandbox. Garbage collect historic library management for sandboxes: we now pass in directory descriptors for library path directories and the sandboxed rtld can just search the path itself. libc no longer requires stub libcache functions. No longer need special handling of /dev/null during sandbox creation, we simply now pass in the original stdin/stdout/stderr, but without any capability rights. When creating a sandbox from within a sandbox, look in the global fdlist inherited from the parent sandbox to find the runtime linker. Sponsored by: Google, Inc. END