imrcpan/freebsd
1
0 Fork 0
mirror of https://github.com/freebsd/freebsd-src.git synced 2026-10-28 11:25:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

sys_capability.c: update the source of CAPENABLED

Browse Source 
System calls allowed in capability mode have been specified by the
CAPENABLED flag in syscalls.master since 2021.
This commit is contained in:
Brooks Davis committed 2024-10-22 19:44:41 +01:00
1 parent 3dd490e800
commit 8ae9921f2e
1 file changed
+6 -5
Download Patch File Download Diff File Expand all files Collapse all files
sys/kern/sys_capability.c
+6 -5
View File
@@ -50,11 +50,12 @@
* derived from existing capabilities, but only if they have the same or a
* strict subset of the rights on the original capability.
*
* System calls permitted in capability mode are defined in capabilities.conf;
* calls must be carefully audited for safety to ensure that they don't allow
* escape from a sandbox. Some calls permit only a subset of operations in
* capability mode -- for example, shm_open(2) is limited to creating
* anonymous, rather than named, POSIX shared memory objects.
* System calls permitted in capability mode are defined by CAPENABLED
* flags in syscalls.master; calls must be carefully audited for safety
* to ensure that they don't allow escape from a sandbox. Some calls
* permit only a subset of operations in capability mode -- for example,
* shm_open(2) is limited to creating anonymous, rather than named,
* POSIX shared memory objects.
*/
#include <sys/cdefs.h>