git: 6b7e4254a29e - main - capsicum: allow rfork(2) in capability mode

From: Mariusz Zaborski <oshogbo_at_FreeBSD.org>
Date: Tue, 21 May 2024 20:04:37 UTC
The branch main has been updated by oshogbo:

URL: https://cgit.FreeBSD.org/src/commit/?id=6b7e4254a29e3228a7273622556b60416e300509

commit 6b7e4254a29e3228a7273622556b60416e300509
Author:     Edward Tomasz Napierala <trasz@FreeBSD.org>
AuthorDate: 2024-05-21 19:55:09 +0000
Commit:     Mariusz Zaborski <oshogbo@FreeBSD.org>
CommitDate: 2024-05-21 20:02:36 +0000

    capsicum: allow rfork(2) in capability mode
    
    Reviewed by:    brooks, rwatson
    MFC after:      4 days
    Differential Revision:  https://reviews.freebsd.org/D45040
---
 sys/kern/syscalls.master | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/kern/syscalls.master b/sys/kern/syscalls.master
index 094c538b22e0..9fdd443955c7 100644
--- a/sys/kern/syscalls.master
+++ b/sys/kern/syscalls.master
@@ -1455,7 +1455,7 @@
 		    int inherit
 		);
 	}
-251	AUE_RFORK	STD {
+251	AUE_RFORK	STD|CAPENABLED {
 		int rfork(
 		    int flags
 		);