svn commit: r305140 - head/sys/kern

[Ed Maste]

Author: emaste
Date: Wed Aug 31 18:33:15 2016
New Revision: 305140
URL: https://svnweb.freebsd.org/changeset/base/305140

Log:
  Allow getdtablesize in capability mode
  
  getdtablesize is "trivial global state" and is similar to
  getrlimit(RLIMIT_NOFILE), so should be permitted in capability mode.
  
  Reviewed by:	oshogbo
  MFC after:	1 week
  Sponsored by:	The FreeBSD Foundation
  Differential Revision:	https://reviews.freebsd.org/D7719

Modified:
  head/sys/kern/capabilities.conf

Modified: head/sys/kern/capabilities.conf
==============================================================================
--- head/sys/kern/capabilities.conf	Wed Aug 31 18:10:41 2016	(r305139)
+++ head/sys/kern/capabilities.conf	Wed Aug 31 18:33:15 2016	(r305140)
@@ -248,6 +248,7 @@ getdirentries
 ## Allow querying certain trivial global state.
 ##
 getdomainname
+getdtablesize
 
 ##
 ## Allow querying current process credential state.