diff options
author | rwatson <rwatson@FreeBSD.org> | 2000-10-13 17:12:58 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2000-10-13 17:12:58 +0000 |
commit | 79bb6ec5ea6aacb1b51654255a46244dd3193676 (patch) | |
tree | 884f966aa570b43e545c557f8f5fa268157d3406 /sys/kern/kern_cap.c | |
parent | a76b72fb58d55a339d5a57029408529d72a76652 (diff) | |
download | FreeBSD-src-79bb6ec5ea6aacb1b51654255a46244dd3193676.zip FreeBSD-src-79bb6ec5ea6aacb1b51654255a46244dd3193676.tar.gz |
o Simplify capability types away from an array of ints to a single
u_int64_t flag field, bounding the number of capabilities at 64,
but substantially cleaning up capability logic (there are currently
43 defined capabilities).
o Heads up to anyone actually using capabilities: the constant
assignments for various capabilities have been redone, so any
persistent binary capability stores (i.e., '$posix1e.cap' EA
backing files) must be recreated. If you have one of these,
you'll know about it, so if you have no idea what this means,
don't worry.
o Update libposix1e to reflect this new definition, fixing the
exposed functions that directly manipulate the flags fields.
Obtained from: TrustedBSD Project
Diffstat (limited to 'sys/kern/kern_cap.c')
-rw-r--r-- | sys/kern/kern_cap.c | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/sys/kern/kern_cap.c b/sys/kern/kern_cap.c index da34795..4b1dccc 100644 --- a/sys/kern/kern_cap.c +++ b/sys/kern/kern_cap.c @@ -26,23 +26,30 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * - * $FreeBSD$ + * $FreeBSD$ */ /* * Developed by the TrustedBSD Project. * Support for POSIX.1e process capabilities. * - * XXX Currently just syscall stubs + * XXX: Currently just syscall stubs. */ #include <sys/types.h> #include <sys/param.h> +#include <sys/kernel.h> #include <sys/systm.h> #include <sys/proc.h> #include <sys/sysproto.h> #include <sys/sysent.h> #include <sys/capability.h> #include <sys/acct.h> +#include <sys/namei.h> +#include <sys/vnode.h> +#include <sys/file.h> +#include <sys/sysctl.h> + +#include "opt_cap.h" /* * Syscall to allow a process to get it's currently capability set |