PERFORCE change 156383 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=156383

Change 156383 by rwatson at rwatson_freebsd_capabilities on 2009/01/19 12:31:10

	Add process descriptor capability definitions and cross-references,
	as well as a previously-missed description of CAP_KEVENT.

Affected files ...

.. //depot/projects/trustedbsd/capabilities/src/lib/libc/sys/cap_new.2#7 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/src/lib/libc/sys/cap_new.2#7 (text+ko) ====

@@ -210,6 +210,12 @@
 .Xr ioctl 2 .
 Be aware that this system call has enourmous scope, including potentially
 global scope for some objects.
+.It Dv CAP_KEVENT
+Permit
+.Xr kevent 2 ;
+.Dv CAP_EVENT
+may also be required on file descriptors to be monitored using
+.Xr kevent 2 .
 .It Dv CAP_LISTEN
 Permit
 .Xr listen 2 ;
@@ -240,6 +246,15 @@
 or
 .Dv CAP_WRITE .
 .Pp
+.It Dv CAP_PDGETPID
+Permit
+.Xr pdgetpid 2 .
+.It Dv CAP_PDKILL
+Permit
+.Xr pdkill 2 .
+.It Dv CAP_PDWAIT
+Permit
+.Xr pdwait 2 .
 .It Dv CAP_PEELOFF
 Permit
 .Xr sctp_peeloff 2 .
@@ -402,6 +417,9 @@
 .Xr mq_open 2 ,
 .Xr open 2 ,
 .Xr openat 2 ,
+.Xr pdgetpid 2 ,
+.Xr pdkill 2 ,
+.Xr pdwait 2 ,
 .Xr pipe 2 ,
 .Xr poll 2 ,
 .Xr pread 2 ,