git: 692b0ef1506b - main - syscalls.master: Allow clock_nanosleep in capability mode

From: Ed Maste <emaste_at_FreeBSD.org>
Date: Fri, 29 May 2026 22:25:50 UTC
The branch main has been updated by emaste:

URL: https://cgit.FreeBSD.org/src/commit/?id=692b0ef1506ba51b72d0a2707cbf8879a6e01d78

commit 692b0ef1506ba51b72d0a2707cbf8879a6e01d78
Author:     Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2026-05-29 20:26:06 +0000
Commit:     Ed Maste <emaste@FreeBSD.org>
CommitDate: 2026-05-29 22:25:42 +0000

    syscalls.master: Allow clock_nanosleep in capability mode
    
    It is akin to nanosleep(2) and does not access global namespaces.
    It should be permitted in capability mode.
    
    Reviewed by: vangyzen
    Fixes: 3f8455b0905a ("Add clock_nanosleep()")
    Sponsored by: The FreeBSD Foundation
    Differential Revision: https://reviews.freebsd.org/D57343
---
 sys/kern/syscalls.master | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/kern/syscalls.master b/sys/kern/syscalls.master
index b3e1d4be9fee..1032f6cd1bf0 100644
--- a/sys/kern/syscalls.master
+++ b/sys/kern/syscalls.master
@@ -1430,7 +1430,7 @@
 		    _Out_ _Contains_timet_ struct ffclock_estimate *cest
 		);
 	}
-244	AUE_NULL	STD {
+244	AUE_NULL	STD|CAPENABLED {
 		int clock_nanosleep(
 		    clockid_t clock_id,
 		    int flags,