From owner-p4-projects@FreeBSD.ORG  Sun Feb  3 21:35:03 2008
Return-Path: <owner-p4-projects@FreeBSD.ORG>
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id CD75E16A41A; Sun,  3 Feb 2008 21:35:02 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 900EC16A419
	for <perforce@freebsd.org>; Sun,  3 Feb 2008 21:35:02 +0000 (UTC)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 86D2A13C442
	for <perforce@freebsd.org>; Sun,  3 Feb 2008 21:35:02 +0000 (UTC)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m13LZ2Kg060614
	for <perforce@freebsd.org>; Sun, 3 Feb 2008 21:35:02 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
	by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m13LZ2Gq060611
	for perforce@freebsd.org; Sun, 3 Feb 2008 21:35:02 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 3 Feb 2008 21:35:02 GMT
Message-Id: <200802032135.m13LZ2Gq060611@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
	bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
To: Perforce Change Reviews <perforce@freebsd.org>
Cc: 
Subject: PERFORCE change 134744 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Feb 2008 21:35:03 -0000

http://perforce.freebsd.org/chv.cgi?CH=134744

Change 134744 by rwatson@rwatson_freebsd_capabilities on 2008/02/03 21:34:40

	Update TODO list, a few things are done, but more needs doing.

Affected files ...

.. //depot/projects/trustedbsd/capabilities/TODO#2 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/TODO#2 (text+ko) ====

@@ -5,22 +5,17 @@
 
 High-level TODO list:
 
-- New file descriptor type "capability" that allows restricting the rights
-  associated with more general file descriptor rights.  cap_new(2) creates
-  a capability from an existing file descriptor and requested rights mask.
-
-- New execution mode "capability mode", in which access to objects is done
-  [almost] entirely through file descriptors or capabilities.  cap_enter()
-  enters this mode.
-
-- Implement fexec(2), so that new programs can be launched in capability
-  mode.
-
 - Implement capfs(3), a library service to provide subsetted file access to
   a capability mode process, such as read capabilities on certain global or
   user databases, libraries, etc, with a POSIX interface within the
   capability mode process.
 
+- Implement scoping for pid-based system calls, tracking a new "inheritence"
+  relationship to authorize such calls.  Unclear what the most efficient way
+  to do this is, but it only matters for processes actually in capability
+  mode so won't affect general performance, just capability mode performance
+  until optimizations are found.
+
 - man pages for system calls
 
 - ... bigger and better things ...