diff options
author | ed <ed@FreeBSD.org> | 2015-08-05 07:36:50 +0000 |
---|---|---|
committer | ed <ed@FreeBSD.org> | 2015-08-05 07:36:50 +0000 |
commit | 0698a33dea5f8920617f2212697ee6438c80bf6d (patch) | |
tree | 729e8c89cdd874fac92ca1e77441c395a63e5ba8 /sys/sys/syscallsubr.h | |
parent | 4a54322f0b8dcd72b1946004f9b964ef0093af1a (diff) | |
download | FreeBSD-src-0698a33dea5f8920617f2212697ee6438c80bf6d.zip FreeBSD-src-0698a33dea5f8920617f2212697ee6438c80bf6d.tar.gz |
Allow the creation of kqueues with a restricted set of Capsicum rights.
On CloudABI we want to create file descriptors with just the minimal set
of Capsicum rights in place. The reason for this is that it makes it
easier to obtain uniform behaviour across different operating systems.
By explicitly whitelisting the operations, we can return consistent
error codes, but also prevent applications from depending OS-specific
behaviour.
Extend kern_kqueue() to take an additional struct filecaps that is
passed on to falloc_caps(). Update the existing consumers to pass in
NULL.
Differential Revision: https://reviews.freebsd.org/D3259
Diffstat (limited to 'sys/sys/syscallsubr.h')
-rw-r--r-- | sys/sys/syscallsubr.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/sys/syscallsubr.h b/sys/sys/syscallsubr.h index 579ac83..ce68ba8 100644 --- a/sys/sys/syscallsubr.h +++ b/sys/sys/syscallsubr.h @@ -126,7 +126,7 @@ int kern_kevent(struct thread *td, int fd, int nchanges, int nevents, int kern_kevent_fp(struct thread *td, struct file *fp, int nchanges, int nevents, struct kevent_copyops *k_ops, const struct timespec *timeout); -int kern_kqueue(struct thread *td, int flags); +int kern_kqueue(struct thread *td, int flags, struct filecaps *fcaps); int kern_kldload(struct thread *td, const char *file, int *fileid); int kern_kldstat(struct thread *td, int fileid, struct kld_file_stat *stat); int kern_kldunload(struct thread *td, int fileid, int flags); |