From owner-p4-projects@FreeBSD.ORG Tue Apr 10 14:04:46 2007 Return-Path: X-Original-To: p4-projects@freebsd.org Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 0DC4916A406; Tue, 10 Apr 2007 14:04:46 +0000 (UTC) X-Original-To: perforce@freebsd.org Delivered-To: perforce@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id A645E16A404 for ; Tue, 10 Apr 2007 14:04:45 +0000 (UTC) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (repoman.freebsd.org [69.147.83.41]) by mx1.freebsd.org (Postfix) with ESMTP id 9458413C468 for ; Tue, 10 Apr 2007 14:04:45 +0000 (UTC) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.8/8.13.8) with ESMTP id l3AE4jIq025012 for ; Tue, 10 Apr 2007 14:04:45 GMT (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.13.8/8.13.8/Submit) id l3AE4jiJ025000 for perforce@freebsd.org; Tue, 10 Apr 2007 14:04:45 GMT (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Date: Tue, 10 Apr 2007 14:04:45 GMT Message-Id: <200704101404.l3AE4jiJ025000@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson To: Perforce Change Reviews Cc: Subject: PERFORCE change 117841 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Apr 2007 14:04:46 -0000 http://perforce.freebsd.org/chv.cgi?CH=117841 Change 117841 by rwatson@rwatson_zoo on 2007/04/10 14:03:50 Survey more privileges. Affected files ... .. //depot/projects/trustedbsd/priv/notes.txt#2 edit Differences ... ==== //depot/projects/trustedbsd/priv/notes.txt#2 (text+ko) ==== @@ -86,19 +86,19 @@ PRIV_ZFS_POOL_CONFIG 0 no PRIV_ZFS_INJECT 0 no PRIV_ZFS_JAIL 0 no -PRIV_VFS_READ yes -PRIV_VFS_WRITE yes -PRIV_VFS_ADMIN yes -PRIV_VFS_EXEC yes -PRIV_VFS_LOOKUP yes -PRIV_VFS_BLOCKRESERVE yes -PRIV_VFS_CHFLAGS_DEV yes -PRIV_VFS_CHOWN yes -PRIV_VFS_CHROOT yes -PRIV_VFS_RETAINSUGID yes -PRIV_VFS_EXCEEDQUOTA no -PRIV_VFS_EXTATTR_SYSTEM no -PRIV_VFS_FCHROOT yes +PRIV_VFS_READ yes yes +PRIV_VFS_WRITE yes yes +PRIV_VFS_ADMIN yes yes +PRIV_VFS_EXEC yes yes +PRIV_VFS_LOOKUP yes yes +PRIV_VFS_BLOCKRESERVE yes yes XXXX surprising? +PRIV_VFS_CHFLAGS_DEV yes yes +PRIV_VFS_CHOWN yes yes +PRIV_VFS_CHROOT yes yes +PRIV_VFS_RETAINSUGID yes yes +PRIV_VFS_EXCEEDQUOTA no no +PRIV_VFS_EXTATTR_SYSTEM no no +PRIV_VFS_FCHROOT no yes PRIV_VFS_FHOPEN no PRIV_VFS_FHSTAT no PRIV_VFS_FHSTATFS no