PERFORCE change 148534 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=148534

Change 148534 by rwatson at rwatson_freebsd_capabilities on 2008/08/26 17:58:27

	Add a new todo: fexecve(2) in capability mode shouldn't allow
	lookup and use of an interpreter from the global namespace.

Affected files ...

.. //depot/projects/trustedbsd/capabilities/TODO#9 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/TODO#9 (text+ko) ====

@@ -45,3 +45,7 @@
   maxprot.
 
 - MAC control of capability facility.
+
+- fxecve(2) may allow eluding capability mode control due to evaluating
+  script interpreter entries on script file descriptors; when in capability
+  mode we must disallow script behavior.