From owner-svn-src-head@FreeBSD.ORG Sun Apr 5 13:26:26 2015 Return-Path: Delivered-To: svn-src-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5B22290; Sun, 5 Apr 2015 13:26:26 +0000 (UTC) Received: from mx1.stack.nl (relay02.stack.nl [IPv6:2001:610:1108:5010::104]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mailhost.stack.nl", Issuer "CA Cert Signing Authority" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 1E601C6D; Sun, 5 Apr 2015 13:26:26 +0000 (UTC) Received: from snail.stack.nl (snail.stack.nl [IPv6:2001:610:1108:5010::131]) by mx1.stack.nl (Postfix) with ESMTP id 193AA358C61; Sun, 5 Apr 2015 15:26:23 +0200 (CEST) Received: by snail.stack.nl (Postfix, from userid 1677) id DD14A28494; Sun, 5 Apr 2015 15:26:22 +0200 (CEST) Date: Sun, 5 Apr 2015 15:26:22 +0200 From: Jilles Tjoelker To: Sergey Kandaurov Subject: Re: svn commit: r281086 - head/sys/kern Message-ID: <20150405132622.GA48066@stack.nl> References: <201504042147.t34LltiZ084425@svn.freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Apr 2015 13:26:26 -0000 On Sun, Apr 05, 2015 at 02:23:05AM +0300, Sergey Kandaurov wrote: > On 5 April 2015 at 00:47, Jilles Tjoelker wrote: > > Author: jilles > > Date: Sat Apr 4 21:47:54 2015 > > New Revision: 281086 > > URL: https://svnweb.freebsd.org/changeset/base/281086 > > Log: > > utimensat: Correct Capsicum required capability rights. > [snip] > What about kern_lutimes()? > It seems it needs CAP_FUTIMES as well due its path argument. The current directory and the root directory don't have capability rights associated with them, so requiring CAP_FUTIMES does not have any effect. For the same reason, lutimes() is not permitted in capability mode. -- Jilles Tjoelker