From owner-svn-src-all@FreeBSD.ORG Tue Mar 1 15:21:04 2011 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0F129106564A; Tue, 1 Mar 2011 15:21:04 +0000 (UTC) (envelope-from jhb@freebsd.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id D7EBB8FC16; Tue, 1 Mar 2011 15:21:03 +0000 (UTC) Received: from bigwig.baldwin.cx (66.111.2.69.static.nyinternet.net [66.111.2.69]) by cyrus.watson.org (Postfix) with ESMTPSA id 89E4746B03; Tue, 1 Mar 2011 10:21:03 -0500 (EST) Received: from jhbbsd.localnet (unknown [209.249.190.10]) by bigwig.baldwin.cx (Postfix) with ESMTPSA id 289708A01B; Tue, 1 Mar 2011 10:21:03 -0500 (EST) From: John Baldwin To: Robert Watson Date: Tue, 1 Mar 2011 10:21:02 -0500 User-Agent: KMail/1.13.5 (FreeBSD/7.4-CBSD-20110107; KDE/4.4.5; amd64; ; ) References: <201103011323.p21DNbau027743@svn.freebsd.org> In-Reply-To: <201103011323.p21DNbau027743@svn.freebsd.org> MIME-Version: 1.0 Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <201103011021.02651.jhb@freebsd.org> X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.6 (bigwig.baldwin.cx); Tue, 01 Mar 2011 10:21:03 -0500 (EST) Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r219129 - in head/sys: compat/freebsd32 conf kern sys X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2011 15:21:04 -0000 On Tuesday, March 01, 2011 8:23:37 am Robert Watson wrote: > Author: rwatson > Date: Tue Mar 1 13:23:37 2011 > New Revision: 219129 > URL: http://svn.freebsd.org/changeset/base/219129 > > Log: > Add initial support for Capsicum's Capability Mode to the FreeBSD kernel, > compiled conditionally on options CAPABILITIES: > > Add a new credential flag, CRED_FLAG_CAPMODE, which indicates that a > subject (typically a process) is in capability mode. > > Add two new system calls, cap_enter(2) and cap_getmode(2), which allow > setting and querying (but never clearing) the flag. > > Export the capability mode flag via process information sysctls. > > Sponsored by: Google, Inc. > Reviewed by: anderson > Discussed with: benl, kris, pjd > Obtained from: Capsicum Project > MFC after: 3 months > > Added: > head/sys/kern/sys_capability.c (contents, props changed) > Modified: > head/sys/compat/freebsd32/syscalls.master > head/sys/conf/NOTES > head/sys/conf/options > head/sys/kern/kern_proc.c > head/sys/kern/syscalls.master > head/sys/sys/ucred.h > head/sys/sys/user.h Looks like head/sys/sys/capability.h wasn't added by accident? -- John Baldwin