diff options
| author | rwatson <rwatson@FreeBSD.org> | 2011-03-01 13:28:27 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2011-03-01 13:28:27 +0000 |
| commit | fa27828ce8c7d01494255e04302a6c6399f9b05c (patch) | |
| tree | 633687ea6519a3e3f9ee337f70eec0a4e84100bc /sys/kern/init_sysent.c | |
| parent | f9ecc7bc78f832fcc9a4353bae704b30ea1d7dbf (diff) | |
| download | FreeBSD-src-fa27828ce8c7d01494255e04302a6c6399f9b05c.zip FreeBSD-src-fa27828ce8c7d01494255e04302a6c6399f9b05c.tar.gz | |
Continue to introduce Capsicum Capability Mode support:
Add a new system call flag, SYF_CAPENABLED, which indicates that a
particular system call is available in capability mode.
Add a new configuration file, kern/capabilities.conf (similar files
may be introduced for other ABIs in the future), which enumerates
system calls that are available in capability mode. When a new
system call is added to syscalls.master, it will also need to be
added here (if needed). Teach sysent parts to use this file to set
values for SYF_CAPENABLED for the native ABI.
Reviewed by: anderson
Discussed with: benl, kris, pjd
Obtained from: Capsicum Project
MFC after: 3 months
Diffstat (limited to 'sys/kern/init_sysent.c')
0 files changed, 0 insertions, 0 deletions
