svn commit: r224852 - head/sys/kern
Robert Watson
rwatson at FreeBSD.org
Sat Aug 13 17:22:16 UTC 2011
Author: rwatson
Date: Sat Aug 13 17:22:16 2011
New Revision: 224852
URL: http://svn.freebsd.org/changeset/base/224852
Log:
Trim some warnings and notes from capabilities.conf -- these are left over
from Capsicum development, and no longer apply.
Approved by: re (kib)
Sponsored by: Google Inc
Modified:
head/sys/kern/capabilities.conf
Modified: head/sys/kern/capabilities.conf
==============================================================================
--- head/sys/kern/capabilities.conf Sat Aug 13 17:21:50 2011 (r224851)
+++ head/sys/kern/capabilities.conf Sat Aug 13 17:22:16 2011 (r224852)
@@ -196,7 +196,7 @@ fpathconf
##
## Allow various file descriptor-based I/O operations, subject to capability
-## rights. mmap(2) requires further attention.
+## rights.
##
freebsd6_ftruncate
freebsd6_lseek
@@ -334,8 +334,6 @@ issetugid
## Allow kevent(2), as we will authorize based on capability rights on the
## target descriptor.
##
-## XXXRW: Do we do this?
-##
kevent
##
@@ -404,9 +402,6 @@ mlockall
## Allow memory mapping a file descriptor, and updating protections, subject
## to capability rights.
##
-## XXXRW: We currently don't properly mask VM protections using capability
-## rights.
-##
mmap
mprotect
More information about the svn-src-all
mailing list