[PR #71] [CLOSED] object capability discipline audit (WIP, FYI) #1216

New issue

Closed

opened 2026-03-16 01:54:33 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 01:54:33 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/71
Author: @dckc
Created: 11/26/2016
Status: ❌ Closed

Base: master ← Head: ocap_audit

📝 Commits (5)

4871f35 pass argv explicitly to Docopt
daed7ca banner() fails ocap safety lint
e915953 flag implicit access to clock, files
36d4c93 note trust_dns_server APIs for ocap clean-up
e05cfaa make directory with README for ocap taming files

📊 Changes

10 files changed (+33 additions, -0 deletions)

View changed files

📝 server/Cargo.toml (+2 -0)
➕ server/ocap_taming/README.md (+1 -0)
➕ server/ocap_taming/chrono.txt (+2 -0)
➕ server/ocap_taming/rusqlite.txt (+2 -0)
➕ server/ocap_taming/std.txt (+2 -0)
➕ server/ocap_taming/trust_dns_server.txt (+2 -0)
📝 server/src/authority/authority.rs (+1 -0)
📝 server/src/authority/persistence.rs (+1 -0)
📝 server/src/lib.rs (+5 -0)
📝 server/src/named.rs (+15 -0)

📄 Description

Implicit access to stuff like files and the clock makes unit testing awkward and hinders security auditing.

The lint stuff goes beyond stable so it would have to go in the long term, once I/we refactor for explicit access.

But I got far enough tonight that I thought I'd share my work in progress.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/71 **Author:** [@dckc](https://github.com/dckc) **Created:** 11/26/2016 **Status:** ❌ Closed **Base:** `master` ← **Head:** `ocap_audit` --- ### 📝 Commits (5) - [`4871f35`](https://github.com/hickory-dns/hickory-dns/commit/4871f35e8fef529a3496959b96ef025c5a9c1813) pass argv explicitly to Docopt - [`daed7ca`](https://github.com/hickory-dns/hickory-dns/commit/daed7caad19f803bf8bdfcac632e431d2bc0e157) banner() fails ocap safety lint - [`e915953`](https://github.com/hickory-dns/hickory-dns/commit/e91595304baaf205e3dbe194e63e613bcee3dcf4) flag implicit access to clock, files - [`36d4c93`](https://github.com/hickory-dns/hickory-dns/commit/36d4c93f6bed7cfcfbfa8979500f99f2208b6539) note trust_dns_server APIs for ocap clean-up - [`e05cfaa`](https://github.com/hickory-dns/hickory-dns/commit/e05cfaa5306783ad6e47b7e0a445c78b0c9a619b) make directory with README for ocap taming files ### 📊 Changes **10 files changed** (+33 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `server/Cargo.toml` (+2 -0) ➕ `server/ocap_taming/README.md` (+1 -0) ➕ `server/ocap_taming/chrono.txt` (+2 -0) ➕ `server/ocap_taming/rusqlite.txt` (+2 -0) ➕ `server/ocap_taming/std.txt` (+2 -0) ➕ `server/ocap_taming/trust_dns_server.txt` (+2 -0) 📝 `server/src/authority/authority.rs` (+1 -0) 📝 `server/src/authority/persistence.rs` (+1 -0) 📝 `server/src/lib.rs` (+5 -0) 📝 `server/src/named.rs` (+15 -0) </details> ### 📄 Description Implicit access to stuff like files and the clock makes unit testing awkward and hinders security auditing. The lint stuff goes beyond stable so it would have to go in the long term, once I/we refactor for explicit access. But I got far enough tonight that I thought I'd share my work in progress. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>