diff options
author | rwatson <rwatson@FreeBSD.org> | 2011-07-17 23:05:24 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2011-07-17 23:05:24 +0000 |
commit | 7c21db8ed3ea76933360bc701c1cfe99e080cdb5 (patch) | |
tree | c4ed35a8f34e303ea8f9aaebd4a5bb9199dfb0dc /cddl/contrib/opensolaris/cmd/zpool | |
parent | 8c65d0122a45d4d6c8d002377782ad53a7a76d91 (diff) | |
download | FreeBSD-src-7c21db8ed3ea76933360bc701c1cfe99e080cdb5.zip FreeBSD-src-7c21db8ed3ea76933360bc701c1cfe99e080cdb5.tar.gz |
Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which
may be jointly referenced via the mask CTLFLAG_CAPRW. Sysctls with these
flags are available in Capsicum's capability mode; other sysctl nodes are
not.
Flag several useful sysctls as available in capability mode, such as memory
layout sysctls required by the run-time linker and malloc(3). Also expose
access to randomness and available kernel features.
A few sysctls are enabled to support name->MIB conversion; these may leak
information to capability mode by virtue of providing resolution on names
not flagged for access in capability mode. This is, generally, not a huge
problem, but might be something to resolve in the future. Flag these cases
with XXX comments.
Submitted by: jonathan
Sponsored by: Google, Inc.
Diffstat (limited to 'cddl/contrib/opensolaris/cmd/zpool')
0 files changed, 0 insertions, 0 deletions