svn commit: r350447 - head/sys/kern

[Mark Johnston]

Author: markj
Date: Tue Jul 30 15:59:44 2019
New Revision: 350447
URL: https://svnweb.freebsd.org/changeset/base/350447

Log:
  Enable copy_file_range(2) in capability mode.
  
  copy_file_range() operates on a pair of file descriptors; it requires
  CAP_READ for the source descriptor and CAP_WRITE for the destination
  descriptor.
  
  Reviewed by:	kevans, oshogbo
  Sponsored by:	The FreeBSD Foundation
  Differential Revision:	https://reviews.freebsd.org/D21113

Modified:
  head/sys/kern/capabilities.conf

Modified: head/sys/kern/capabilities.conf
==============================================================================
--- head/sys/kern/capabilities.conf	Tue Jul 30 15:57:31 2019	(r350446)
+++ head/sys/kern/capabilities.conf	Tue Jul 30 15:59:44 2019	(r350447)
@@ -133,6 +133,11 @@ closefrom
 connectat
 
 ##
+## copy_file_range(2) reads from one descriptor and writes to the other.
+##
+copy_file_range
+
+##
 ## cpuset(2) and related calls are limited to caller's own process/thread.
 ##
 #cpuset