PERFORCE change 156422 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=156422

Change 156422 by rwatson at rwatson_freebsd_capabilities on 2009/01/20 10:35:17

	Remove no-obsolete KSE system calls from capability mode-enabled set,
	re-disable ioctl while I cogitate on it more.

Affected files ...

.. //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#17 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/kern/init_sysent.c#27 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/kern/syscalls.c#27 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/kern/systrace_args.c#27 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.h#27 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.mk#27 edit
.. //depot/projects/trustedbsd/capabilities/src/sys/sys/sysproto.h#27 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#17 (text+ko) ====

@@ -38,7 +38,7 @@
 ## - sys_exit(2), abort2(2) and close(2) are very important.
 ## - Sorted alphabetically, please keep it that way.
 ##
-## $P4: //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#16 $
+## $P4: //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#17 $
 ##
 
 ##
@@ -326,7 +326,7 @@
 ##
 ## XXXRW: This needs to be revisited.
 ##
-ioctl
+#ioctl
 
 ##
 ## Allow querying current process credential state.
@@ -356,18 +356,6 @@
 kqueue
 
 ##
-## Allow threading-related system calls.
-##
-## XXXRW: These are obsolete, remove?
-##
-kse_create
-kse_exit
-kse_release
-kse_switchin
-kse_thr_interrupt
-kse_wakeup
-
-##
 ## Allow managing per-process timers.
 ##
 ktimer_create

==== //depot/projects/trustedbsd/capabilities/src/sys/kern/init_sysent.c#27 (text+ko) ====

@@ -82,7 +82,7 @@
 	{ AS(acct_args), (sy_call_t *)acct, AUE_ACCT, NULL, 0, 0, 0 },	/* 51 = acct */
 	{ compat(0,sigpending), AUE_SIGPENDING, NULL, 0, 0, SYF_CAPENABLED },		/* 52 = old sigpending */
 	{ AS(sigaltstack_args), (sy_call_t *)sigaltstack, AUE_SIGALTSTACK, NULL, 0, 0, SYF_CAPENABLED },	/* 53 = sigaltstack */
-	{ AS(ioctl_args), (sy_call_t *)ioctl, AUE_IOCTL, NULL, 0, 0, SYF_CAPENABLED },	/* 54 = ioctl */
+	{ AS(ioctl_args), (sy_call_t *)ioctl, AUE_IOCTL, NULL, 0, 0, 0 },	/* 54 = ioctl */
 	{ AS(reboot_args), (sy_call_t *)reboot, AUE_REBOOT, NULL, 0, 0, 0 },	/* 55 = reboot */
 	{ AS(revoke_args), (sy_call_t *)revoke, AUE_REVOKE, NULL, 0, 0, 0 },	/* 56 = revoke */
 	{ AS(symlink_args), (sy_call_t *)symlink, AUE_SYMLINK, NULL, 0, 0, 0 },	/* 57 = symlink */

==== //depot/projects/trustedbsd/capabilities/src/sys/kern/syscalls.c#27 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/kern/systrace_args.c#27 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.h#27 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/sys/syscall.mk#27 (text+ko) ====


==== //depot/projects/trustedbsd/capabilities/src/sys/sys/sysproto.h#27 (text+ko) ====