Date: Tue, 1 Mar 2011 13:28:27 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/kern Makefile capabilities.conf makesyscalls.sh src/sys/sys sysent.h Message-ID: <201103011328.p21DSgA2033021@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2011-03-01 13:28:27 UTC
FreeBSD src repository
Modified files:
sys/kern Makefile makesyscalls.sh
sys/sys sysent.h
Added files:
sys/kern capabilities.conf
Log:
SVN rev 219131 on 2011-03-01 13:28:27Z by rwatson
Continue to introduce Capsicum Capability Mode support:
Add a new system call flag, SYF_CAPENABLED, which indicates that a
particular system call is available in capability mode.
Add a new configuration file, kern/capabilities.conf (similar files
may be introduced for other ABIs in the future), which enumerates
system calls that are available in capability mode. When a new
system call is added to syscalls.master, it will also need to be
added here (if needed). Teach sysent parts to use this file to set
values for SYF_CAPENABLED for the native ABI.
Reviewed by: anderson
Discussed with: benl, kris, pjd
Obtained from: Capsicum Project
MFC after: 3 months
Revision Changes Path
1.20 +2 -1 src/sys/kern/Makefile
1.1 +756 -0 src/sys/kern/capabilities.conf (new)
1.80 +23 -1 src/sys/kern/makesyscalls.sh
1.73 +5 -0 src/sys/sys/sysent.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201103011328.p21DSgA2033021>