PERFORCE change 163768 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=163768

Change 163768 by rwatson at rwatson_freebsd_capabilities on 2009/06/08 08:26:29

	Do push executing process into a sandbox before fexecve(2).

Affected files ...

.. //depot/projects/trustedbsd/capabilities/src/tools/cap/cap_exec/cap_exec.c#4 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/src/tools/cap/cap_exec/cap_exec.c#4 (text+ko) ====

@@ -124,10 +124,8 @@
 		 * Global namespaces no longer required, enter capability
 		 * mode.
 		 */
-#if 0
 		if (cap_enter() < 0)
 			err(-1, "cap_enter");
-#endif
 
 		/*
 		 * Set up stdin, stdout, and stderr by wrapping the existing