git: 3f9359a5aa87 - stable/14 - syscalls.master: allow vfork(2) in capsicum(4) capability mode

From: Mariusz Zaborski <oshogbo_at_FreeBSD.org>
Date: Mon, 27 May 2024 11:30:40 UTC
The branch stable/14 has been updated by oshogbo:

URL: https://cgit.FreeBSD.org/src/commit/?id=3f9359a5aa87acc38942cb0b61c366c0f9ce8aa9

commit 3f9359a5aa87acc38942cb0b61c366c0f9ce8aa9
Author:     Edward Tomasz Napierala <trasz@FreeBSD.org>
AuthorDate: 2024-05-13 14:10:01 +0000
Commit:     Mariusz Zaborski <oshogbo@FreeBSD.org>
CommitDate: 2024-05-27 11:29:38 +0000

    syscalls.master: allow vfork(2) in capsicum(4) capability mode
    
    There is no reason not do do this, we already allow fork(2),
    and I need vfork(2) for CHERI process colocation.
    
    Reviewed by:    brooks, emaste, oshogbo
    MFC after:      1 week
    Differential Revision:  https://reviews.freebsd.org/D39829
    
    (cherry picked from commit 050555e129789fa2e20eba565f1320936b3d66e4)
---
 sys/kern/syscalls.master | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/kern/syscalls.master b/sys/kern/syscalls.master
index a50d7723378c..4b8973c4b882 100644
--- a/sys/kern/syscalls.master
+++ b/sys/kern/syscalls.master
@@ -498,7 +498,7 @@
 		    int flags
 		);
 	}
-66	AUE_VFORK	STD {
+66	AUE_VFORK	STD|CAPENABLED {
 		int vfork(void);
 	}
 67	AUE_NULL	OBSOL	vread