diff options
| author | rwatson <rwatson@FreeBSD.org> | 2011-03-01 13:28:27 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2011-03-01 13:28:27 +0000 |
| commit | fa27828ce8c7d01494255e04302a6c6399f9b05c (patch) | |
| tree | 633687ea6519a3e3f9ee337f70eec0a4e84100bc /sys/kern/Makefile | |
| parent | f9ecc7bc78f832fcc9a4353bae704b30ea1d7dbf (diff) | |
| download | FreeBSD-src-fa27828ce8c7d01494255e04302a6c6399f9b05c.zip FreeBSD-src-fa27828ce8c7d01494255e04302a6c6399f9b05c.tar.gz | |
Continue to introduce Capsicum Capability Mode support:
Add a new system call flag, SYF_CAPENABLED, which indicates that a
particular system call is available in capability mode.
Add a new configuration file, kern/capabilities.conf (similar files
may be introduced for other ABIs in the future), which enumerates
system calls that are available in capability mode. When a new
system call is added to syscalls.master, it will also need to be
added here (if needed). Teach sysent parts to use this file to set
values for SYF_CAPENABLED for the native ABI.
Reviewed by: anderson
Discussed with: benl, kris, pjd
Obtained from: Capsicum Project
MFC after: 3 months
Diffstat (limited to 'sys/kern/Makefile')
| -rw-r--r-- | sys/kern/Makefile | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/kern/Makefile b/sys/kern/Makefile index ab05c8a..0721e82 100644 --- a/sys/kern/Makefile +++ b/sys/kern/Makefile @@ -10,7 +10,8 @@ sysent: init_sysent.c syscalls.c ../sys/syscall.h ../sys/syscall.mk \ ../sys/sysproto.h init_sysent.c syscalls.c systrace_args.c ../sys/syscall.h \ -../sys/syscall.mk ../sys/sysproto.h: makesyscalls.sh syscalls.master +../sys/syscall.mk ../sys/sysproto.h: makesyscalls.sh syscalls.master \ +capabilities.conf -mv -f init_sysent.c init_sysent.c.bak -mv -f syscalls.c syscalls.c.bak -mv -f systrace_args.c systrace_args.c.bak |
