d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

We need CAP_MMAP_RW on memfd, since init_msix_table() may call mmap().

Browse Source
This commit is contained in:
Gleb Smirnoff 2017-04-27 05:48:52 +00:00
parent ad81354ceb
commit 007e172d64
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=317483
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
usr.sbin/bhyve/pci_passthru.c
View File

@ -703,6 +703,7 @@ passthru_init(struct vmctx *ctx, struct pci_devinst *pi, char *opts)
#ifndef WITHOUT_CAPSICUM
cap_rights_clear(&rights, CAP_IOCTL);
cap_rights_set(&rights, CAP_MMAP_RW);
if (cap_rights_limit(memfd, &rights) == -1 && errno != ENOSYS)
errx(EX_OSERR, "Unable to apply rights for sandbox");
#endif