getrandom(2) should not be restricted in capability mode.

svn path=/head/; revision=337998
2018-08-18 06:31:49 +00:00 · 2018-08-18 06:31:49 +00:00 · 0362ec1e8e · 2020-12-20 02:59:44 +00:00
commit 0362ec1e8e
parent 718863d076
2 changed files with 6 additions and 0 deletions
--- a/sys/compat/freebsd32/capabilities.conf
+++ b/sys/compat/freebsd32/capabilities.conf
@ -134,6 +134,7 @@ getpgrp
 getpid
 getppid
 getpriority
+getrandom
 getresgid
 getresuid
 getrlimit
--- a/sys/kern/capabilities.conf
+++ b/sys/kern/capabilities.conf
@ -307,6 +307,11 @@ getrlimit
 getrusage
 getsid

+##
+## Allow getrandom
+##
+getrandom
+
 ##
 ## Allow querying socket state, subject to capability rights.
 ##