48 	struct ssh_sandbox *box = NULL;  in ssh_sandbox_init()  local
50 	box = xcalloc(1, sizeof(*box));  in ssh_sandbox_init()
53 	box->pset = solaris_basic_privset();  in ssh_sandbox_init()
55 	if (box->pset == NULL) {  in ssh_sandbox_init()
56 		free(box);  in ssh_sandbox_init()
61 	if (priv_delset(box->pset, PRIV_FILE_LINK_ANY) != 0 ||  in ssh_sandbox_init()
63 	    priv_delset(box->pset, PRIV_NET_ACCESS) != 0 ||  in ssh_sandbox_init()
66 	    priv_delset(box->pset, PRIV_DAX_ACCESS) != 0 ||  in ssh_sandbox_init()
69 	    priv_delset(box->pset, PRIV_SYS_IB_INFO) != 0 ||  in ssh_sandbox_init()
71 	    priv_delset(box->pset, PRIV_PROC_EXEC) != 0 ||  in ssh_sandbox_init()
72 	    priv_delset(box->pset, PRIV_PROC_FORK) != 0 ||  in ssh_sandbox_init()
73 	    priv_delset(box->pset, PRIV_PROC_INFO) != 0 ||  in ssh_sandbox_init()
74 	    priv_delset(box->pset, PRIV_PROC_SESSION) != 0) {  in ssh_sandbox_init()
75 		free(box);  in ssh_sandbox_init()
81 	if (priv_delset(box->pset, PRIV_FILE_READ) != 0 ||  in ssh_sandbox_init()
82 	    priv_delset(box->pset, PRIV_FILE_WRITE) != 0) {  in ssh_sandbox_init()
83 		free(box);  in ssh_sandbox_init()
88 	return box;  in ssh_sandbox_init()
92 ssh_sandbox_child(struct ssh_sandbox *box)  in ssh_sandbox_child()  argument
94 	if (setppriv(PRIV_SET, PRIV_PERMITTED, box->pset) != 0 ||  in ssh_sandbox_child()
95 	    setppriv(PRIV_SET, PRIV_LIMIT, box->pset) != 0 ||  in ssh_sandbox_child()
96 	    setppriv(PRIV_SET, PRIV_INHERITABLE, box->pset) != 0)  in ssh_sandbox_child()
101 ssh_sandbox_parent_finish(struct ssh_sandbox *box)  in ssh_sandbox_parent_finish()  argument
103 	priv_freeset(box->pset);  in ssh_sandbox_parent_finish()
104 	box->pset = NULL;  in ssh_sandbox_parent_finish()
105 	free(box);  in ssh_sandbox_parent_finish()
109 ssh_sandbox_parent_preauth(struct ssh_sandbox *box, pid_t child_pid)  in ssh_sandbox_parent_preauth()  argument