git: 44fb543ac92b - stable/14 - capsicum: allow rfork(2) in capability mode

From: Mariusz Zaborski <oshogbo_at_FreeBSD.org>
Date: Mon, 27 May 2024 11:31:29 UTC
The branch stable/14 has been updated by oshogbo:

URL: https://cgit.FreeBSD.org/src/commit/?id=44fb543ac92bc9ebedfbfe60225811e257c6daab

commit 44fb543ac92bc9ebedfbfe60225811e257c6daab
Author:     Edward Tomasz Napierala <trasz@FreeBSD.org>
AuthorDate: 2024-05-21 19:55:09 +0000
Commit:     Mariusz Zaborski <oshogbo@FreeBSD.org>
CommitDate: 2024-05-27 11:32:11 +0000

    capsicum: allow rfork(2) in capability mode
    
    Reviewed by:    brooks, rwatson
    MFC after:      4 days
    Differential Revision:  https://reviews.freebsd.org/D45040
    
    (cherry picked from commit 6b7e4254a29e3228a7273622556b60416e300509)
---
 sys/kern/syscalls.master | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/kern/syscalls.master b/sys/kern/syscalls.master
index 4b8973c4b882..47b67e4dbaa7 100644
--- a/sys/kern/syscalls.master
+++ b/sys/kern/syscalls.master
@@ -1465,7 +1465,7 @@
 		    int inherit
 		);
 	}
-251	AUE_RFORK	STD {
+251	AUE_RFORK	STD|CAPENABLED {
 		int rfork(
 		    int flags
 		);