PERFORCE change 156400 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=156400

Change 156400 by rwatson at rwatson_freebsd_capabilities on 2009/01/19 18:53:48

	Since we have CAP_IOCTL, allow ioctl() in capability mode,
	subject to the capability being set.

Affected files ...

.. //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#16 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/kern/init_sysent.c#26 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/kern/syscalls.c#26 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/kern/systrace_args.c#26 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.h#26 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.mk#26 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/sys/sysproto.h#26 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#16 (text+ko) ====

@@ -38,7 +38,7 @@
 ## - sys_exit(2), abort2(2) and close(2) are very important.
 ## - Sorted alphabetically, please keep it that way.
 ##
-## $P4: //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#15 $
+## $P4: //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#16 $
 ##
 
 ##
@@ -326,7 +326,7 @@
 ##
 ## XXXRW: This needs to be revisited.
 ##
-#ioctl
+ioctl
 
 ##
 ## Allow querying current process credential state.

==== //depot/projects/trustedbsd/capabilities/src/sys/kern/init_sysent.c#26 (text+ko) ====

@@ -82,7 +82,7 @@
 	{ AS(acct_args), (sy_call_t *)acct, AUE_ACCT, NULL, 0, 0, 0 },	/* 51 = acct */
 	{ compat(0,sigpending), AUE_SIGPENDING, NULL, 0, 0, SYF_CAPENABLED },		/* 52 = old sigpending */
 	{ AS(sigaltstack_args), (sy_call_t *)sigaltstack, AUE_SIGALTSTACK, NULL, 0, 0, SYF_CAPENABLED },	/* 53 = sigaltstack */
-	{ AS(ioctl_args), (sy_call_t *)ioctl, AUE_IOCTL, NULL, 0, 0, 0 },	/* 54 = ioctl */
+	{ AS(ioctl_args), (sy_call_t *)ioctl, AUE_IOCTL, NULL, 0, 0, SYF_CAPENABLED },	/* 54 = ioctl */
 	{ AS(reboot_args), (sy_call_t *)reboot, AUE_REBOOT, NULL, 0, 0, 0 },	/* 55 = reboot */
 	{ AS(revoke_args), (sy_call_t *)revoke, AUE_REVOKE, NULL, 0, 0, 0 },	/* 56 = revoke */
 	{ AS(symlink_args), (sy_call_t *)symlink, AUE_SYMLINK, NULL, 0, 0, 0 },	/* 57 = symlink */

==== //depot/projects/trustedbsd/capabilities/src/sys/kern/syscalls.c#26 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/kern/systrace_args.c#26 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.h#26 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.mk#26 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/sys/sysproto.h#26 (text+ko) ====