Searched hist:219129 (Results 1 - 1 of 1) sorted by relevance

/freebsd-10-stable/sys/sys/
H A Ducred.hdiff 219129 Tue Mar 01 11:28:49 MST 2011 rwatson Add initial support for Capsicum's Capability Mode to the FreeBSD kernel,
compiled conditionally on options CAPABILITIES:

Add a new credential flag, CRED_FLAG_CAPMODE, which indicates that a
subject (typically a process) is in capability mode.

Add two new system calls, cap_enter(2) and cap_getmode(2), which allow
setting and querying (but never clearing) the flag.

Export the capability mode flag via process information sysctls.

Sponsored by: Google, Inc.
Reviewed by: anderson
Discussed with: benl, kris, pjd
Obtained from: Capsicum Project
MFC after: 3 months

Completed in 67 milliseconds