svn commit: r337998 - in head/sys: compat/freebsd32 kern

[Xin LI]

Author: delphij
Date: Sat Aug 18 06:31:49 2018
New Revision: 337998
URL: https://svnweb.freebsd.org/changeset/base/337998

Log:
  getrandom(2) should not be restricted in capability mode.

Modified:
  head/sys/compat/freebsd32/capabilities.conf
  head/sys/kern/capabilities.conf

Modified: head/sys/compat/freebsd32/capabilities.conf
==============================================================================
--- head/sys/compat/freebsd32/capabilities.conf	Sat Aug 18 06:20:45 2018	(r337997)
+++ head/sys/compat/freebsd32/capabilities.conf	Sat Aug 18 06:31:49 2018	(r337998)
@@ -134,6 +134,7 @@ getpgrp
 getpid
 getppid
 getpriority
+getrandom
 getresgid
 getresuid
 getrlimit

Modified: head/sys/kern/capabilities.conf
==============================================================================
--- head/sys/kern/capabilities.conf	Sat Aug 18 06:20:45 2018	(r337997)
+++ head/sys/kern/capabilities.conf	Sat Aug 18 06:31:49 2018	(r337998)
@@ -308,6 +308,11 @@ getrusage
 getsid
 
 ##
+## Allow getrandom
+##
+getrandom
+
+##
 ## Allow querying socket state, subject to capability rights.
 ##
 ## XXXRW: getsockopt(2) may need more attention.