note on jail_solaris:

ideally, vmods could tell the jails about privileges they require, but
for now (and because vmod_unix lives in varnish-cache), just add the
required privilege to the permitted set.

I have also considered the option to add additional privileges via the
-j argument (and actually would still want to add that somewhen), but
for this purpose, varnish should really DTRT by default.

note on priv_allocset:

Most of the sun folk had proven to be good interface designers, but
an API which requires dynamic allocation/deallocation really does not
play well with my efficiency fetish. So good we got library
constructors/destructors.

note on getpeerucred:

basically the same thing, but this time they at least added
ucred_size(). Not intended for use like this, but anyway....