diff options
| author | pjd <pjd@FreeBSD.org> | 2013-11-14 23:18:32 +0000 |
|---|---|---|
| committer | pjd <pjd@FreeBSD.org> | 2013-11-14 23:18:32 +0000 |
| commit | 5927c75f99d7f3088dbf6edca614f72f7c40d24d (patch) | |
| tree | c22a259fcd5f2d29e66a8f23856662e7f6be0cd1 /sys/sys/capability.h | |
| parent | beda753f0c821bd2961008cccd558715714cc441 (diff) | |
| download | FreeBSD-src-5927c75f99d7f3088dbf6edca614f72f7c40d24d.zip FreeBSD-src-5927c75f99d7f3088dbf6edca614f72f7c40d24d.tar.gz | |
The CAP_LINKAT, CAP_MKDIRAT, CAP_MKFIFOAT, CAP_MKNODAT, CAP_RENAMEAT,
CAP_SYMLINKAT and CAP_UNLINKAT capability rights make no sense without
the CAP_LOOKUP right, so include this rights.
Sponsored by: The FreeBSD Foundation
MFC after: 3 days
Diffstat (limited to 'sys/sys/capability.h')
| -rw-r--r-- | sys/sys/capability.h | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/sys/sys/capability.h b/sys/sys/capability.h index ca1fbc2..443bae8 100644 --- a/sys/sys/capability.h +++ b/sys/sys/capability.h @@ -151,22 +151,22 @@ /* Allows for futimes(2) and futimesat(2). */ #define CAP_FUTIMESAT (CAP_FUTIMES | CAP_LOOKUP) /* Allows for linkat(2) and renameat(2) (destination directory descriptor). */ -#define CAP_LINKAT CAPRIGHT(0, 0x0000000000400000ULL) +#define CAP_LINKAT (CAP_LOOKUP | 0x0000000000400000ULL) /* Allows for mkdirat(2). */ -#define CAP_MKDIRAT CAPRIGHT(0, 0x0000000000800000ULL) +#define CAP_MKDIRAT (CAP_LOOKUP | 0x0000000000800000ULL) /* Allows for mkfifoat(2). */ -#define CAP_MKFIFOAT CAPRIGHT(0, 0x0000000001000000ULL) +#define CAP_MKFIFOAT (CAP_LOOKUP | 0x0000000001000000ULL) /* Allows for mknodat(2). */ -#define CAP_MKNODAT CAPRIGHT(0, 0x0000000002000000ULL) +#define CAP_MKNODAT (CAP_LOOKUP | 0x0000000002000000ULL) /* Allows for renameat(2). */ -#define CAP_RENAMEAT CAPRIGHT(0, 0x0000000004000000ULL) +#define CAP_RENAMEAT (CAP_LOOKUP | 0x0000000004000000ULL) /* Allows for symlinkat(2). */ -#define CAP_SYMLINKAT CAPRIGHT(0, 0x0000000008000000ULL) +#define CAP_SYMLINKAT (CAP_LOOKUP | 0x0000000008000000ULL) /* * Allows for unlinkat(2) and renameat(2) if destination object exists and * will be removed. */ -#define CAP_UNLINKAT CAPRIGHT(0, 0x0000000010000000ULL) +#define CAP_UNLINKAT (CAP_LOOKUP | 0x0000000010000000ULL) /* Extended attributes. */ /* Allows for extattr_delete_fd(2). */ |
