From owner-cvs-src-old@FreeBSD.ORG Fri Jul 15 09:38:16 2011 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 671BD1065670 for ; Fri, 15 Jul 2011 09:38:16 +0000 (UTC) (envelope-from jonathan@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 558238FC13 for ; Fri, 15 Jul 2011 09:38:16 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id p6F9cGdi063334 for ; Fri, 15 Jul 2011 09:38:16 GMT (envelope-from jonathan@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id p6F9cGUT063333 for cvs-src-old@freebsd.org; Fri, 15 Jul 2011 09:38:16 GMT (envelope-from jonathan@repoman.freebsd.org) Message-Id: <201107150938.p6F9cGUT063333@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to jonathan@repoman.freebsd.org using -f From: Jonathan Anderson Date: Fri, 15 Jul 2011 09:37:14 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/kern kern_descrip.c sys_capability.c src/sys/sys capability.h X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2011 09:38:16 -0000 jonathan 2011-07-15 09:37:14 UTC FreeBSD src repository Modified files: sys/kern kern_descrip.c sys_capability.c sys/sys capability.h Log: SVN rev 224056 on 2011-07-15 09:37:14Z by jonathan Add implementation for capabilities. Code to actually implement Capsicum capabilities, including fileops and kern_capwrap(), which creates a capability to wrap an existing file descriptor. We also modify kern_close() and closef() to handle capabilities. Finally, remove cap_filelist from struct capability, since we don't actually need it. Approved by: mentor (rwatson), re (Capsicum blanket) Sponsored by: Google Inc Revision Changes Path 1.374 +20 -6 src/sys/kern/kern_descrip.c 1.6 +214 -4 src/sys/kern/sys_capability.c 1.17 +6 -0 src/sys/sys/capability.h