svn commit: r224852 - head/sys/kern

Robert Watson rwatson at FreeBSD.org
Sat Aug 13 17:22:16 UTC 2011


Author: rwatson
Date: Sat Aug 13 17:22:16 2011
New Revision: 224852
URL: http://svn.freebsd.org/changeset/base/224852

Log:
  Trim some warnings and notes from capabilities.conf -- these are left over
  from Capsicum development, and no longer apply.
  
  Approved by:	re (kib)
  Sponsored by:	Google Inc

Modified:
  head/sys/kern/capabilities.conf

Modified: head/sys/kern/capabilities.conf
==============================================================================
--- head/sys/kern/capabilities.conf	Sat Aug 13 17:21:50 2011	(r224851)
+++ head/sys/kern/capabilities.conf	Sat Aug 13 17:22:16 2011	(r224852)
@@ -196,7 +196,7 @@ fpathconf
 
 ##
 ## Allow various file descriptor-based I/O operations, subject to capability
-## rights.  mmap(2) requires further attention.
+## rights.
 ##
 freebsd6_ftruncate
 freebsd6_lseek
@@ -334,8 +334,6 @@ issetugid
 ## Allow kevent(2), as we will authorize based on capability rights on the
 ## target descriptor.
 ##
-## XXXRW: Do we do this?
-##
 kevent
 
 ##
@@ -404,9 +402,6 @@ mlockall
 ## Allow memory mapping a file descriptor, and updating protections, subject
 ## to capability rights.
 ##
-## XXXRW: We currently don't properly mask VM protections using capability
-## rights.
-##
 mmap
 mprotect
 


More information about the svn-src-all mailing list