Add implementation for capabilities.

Code to actually implement Capsicum capabilities, including fileops and
kern_capwrap(), which creates a capability to wrap an existing file
descriptor.

We also modify kern_close() and closef() to handle capabilities.

Finally, remove cap_filelist from struct capability, since we don't
actually need it.

Approved by: mentor (rwatson), re (Capsicum blanket)
Sponsored by: Google Inc

1 files changed, 6 insertions, 0 deletions

diff --git a/sys/sys/capability.h b/sys/sys/capability.h
index b56aa8b..5f5c35e 100644
--- a/sys/sys/capability.h
+++ b/sys/sys/capability.h
@@ -64,6 +64,12 @@
 #define IN_CAPABILITY_MODE(td) (td->td_ucred->cr_flags & CRED_FLAG_CAPMODE)
 
 /*
+ * Create a capability to wrap a file object.
+ */
+int	kern_capwrap(struct thread *td, struct file *fp, cap_rights_t rights,
+	    struct file **cap, int *capfd);
+
+/*
  * Unwrap a capability if its rights mask is a superset of 'rights'.
  *
  * Unwrapping a non-capability is effectively a no-op; the value of fp_cap