Remove PRIV_ROOT -- all system privileges must now be explicitly named

in support of forthcoming work on a fine-grained privilege mechanism.

Facilitated by:	bz, thompsa, rink

1 files changed, 2 insertions, 7 deletions

diff --git a/sys/sys/priv.h b/sys/sys/priv.h
index b242792..6609657 100644
--- a/sys/sys/priv.h
+++ b/sys/sys/priv.h
@@ -52,13 +52,7 @@
 /*
  * Track beginning of privilege list.
  */
-#define	_PRIV_LOWEST	0
-
-/*
- * PRIV_ROOT is a catch-all for as yet unnamed privileges.  No new
- * references to this privilege should be added.
- */
-#define	PRIV_ROOT	1	/* Catch-all during development. */
+#define	_PRIV_LOWEST	1
 
 /*
  * The remaining privileges typically correspond to one or a small
@@ -67,6 +61,7 @@
  * privileges, such as the ability to reboot, and then loosely by
  * subsystem, indicated by a subsystem name.
  */
+#define	_PRIV_ROOT		1	/* Removed. */
 #define	PRIV_ACCT		2	/* Manage process accounting. */
 #define	PRIV_MAXFILES		3	/* Exceed system open files limit. */
 #define	PRIV_MAXPROC		4	/* Exceed system processes limit. */