capsicum: allow the setproctitle(3) function in capability mode

Capsicum in past allowed to change the process title.
This was broken with r335939.

PR:		230584
Submitted by:	Yuichiro NAITO <naito.yuichiro@gmail.com>
Reported by:	ian@niw.com.au
MFC after:	1 week
This commit is contained in:
Mariusz Zaborski 2018-08-17 14:35:10 +00:00
parent 1a36f105a4
commit 2fe6aefff8
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=337965

View File

@ -123,7 +123,7 @@ static int do_execve(struct thread *td, struct image_args *args,
/* XXX This should be vm_size_t. */
SYSCTL_PROC(_kern, KERN_PS_STRINGS, ps_strings, CTLTYPE_ULONG|CTLFLAG_RD|
CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
CTLFLAG_CAPRD|CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
/* XXX This should be vm_size_t. */
SYSCTL_PROC(_kern, KERN_USRSTACK, usrstack, CTLTYPE_ULONG|CTLFLAG_RD|