upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-12 10:10:24 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

sys_capability.c: update the source of CAPENABLED

Browse source 
System calls allowed in capability mode have been specified by the
CAPENABLED flag in syscalls.master since 2021.
This commit is contained in:
Brooks Davis 2024-10-22 18:49:43 +01:00
parent 3dd490e800
commit 8ae9921f2e
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
sys/kern/sys_capability.c
View file

@ -50,11 +50,12 @@
* derived from existing capabilities, but only if they have the same or a
* strict subset of the rights on the original capability.
*
* System calls permitted in capability mode are defined in capabilities.conf;
* calls must be carefully audited for safety to ensure that they don't allow
* escape from a sandbox. Some calls permit only a subset of operations in
* capability mode -- for example, shm_open(2) is limited to creating
* anonymous, rather than named, POSIX shared memory objects.
* System calls permitted in capability mode are defined by CAPENABLED
* flags in syscalls.master; calls must be carefully audited for safety
* to ensure that they don't allow escape from a sandbox. Some calls
* permit only a subset of operations in capability mode -- for example,
* shm_open(2) is limited to creating anonymous, rather than named,
* POSIX shared memory objects.
*/
#include <sys/cdefs.h>