[Bug 222258] renameat(2) capability error with absolute path names outside of a sandbox

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222258

--- Comment #5 from Ed Maste <emaste at freebsd.org> ---
FWIW the failure comes from the cap_check() in kern_renameat(),
sys/kern/vfs_syscalls.c:3515:

  3509  #ifdef CAPABILITIES
  3510                  if (newfd != AT_FDCWD) {
  3511                          /*
  3512                           * If the target already exists we require
CAP_UNLINKAT
  3513                           * from 'newfd'.
  3514                           */
  3515                          error = cap_check(&tond.ni_filecaps.fc_rights,
  3516                              cap_rights_init(&rights, CAP_UNLINKAT));
  3517                          if (error != 0)
  3518                                  goto out;
  3519                  }
  3520  #endif

-- 
You are receiving this mail because:
You are the assignee for the bug.