Define the CAPABILITIES kernel option.
This option will enable Capsicum capabilities, which provide a fine-grained mask on operations that can be performed on file descriptors. Approved by: mentor (rwatson), re (Capsicum blanket ok) Sponsored by: Google Inc
This commit is contained in:
parent
18f5477167
commit
55d4d6f414
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=223723
@ -1162,7 +1162,8 @@ options MAC_STUB
|
||||
options MAC_TEST
|
||||
|
||||
# Support for Capsicum
|
||||
options CAPABILITY_MODE
|
||||
options CAPABILITIES # fine-grained rights on file descriptors
|
||||
options CAPABILITY_MODE # sandboxes with no global namespace access
|
||||
|
||||
|
||||
#####################################################################
|
||||
|
@ -63,6 +63,7 @@ SYSCTL_DEBUG opt_sysctl.h
|
||||
ADAPTIVE_LOCKMGRS
|
||||
ALQ
|
||||
AUDIT opt_global.h
|
||||
CAPABILITIES opt_capsicum.h
|
||||
CAPABILITY_MODE opt_capsicum.h
|
||||
CODA_COMPAT_5 opt_coda.h
|
||||
COMPAT_43 opt_compat.h
|
||||
|
Loading…
Reference in New Issue
Block a user