d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Enable copy_file_range(2) in capability mode.

Browse Source 
copy_file_range() operates on a pair of file descriptors; it requires
CAP_READ for the source descriptor and CAP_WRITE for the destination
descriptor.

Reviewed by:	kevans, oshogbo
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D21113
This commit is contained in:
Mark Johnston 2019-07-30 15:59:44 +00:00
parent 0b21d89499
commit f30f7b9870
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=350447
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/kern/capabilities.conf
View File

@ -132,6 +132,11 @@ closefrom
##
connectat
##
## copy_file_range(2) reads from one descriptor and writes to the other.
##
copy_file_range
##
## cpuset(2) and related calls are limited to caller's own process/thread.
##