getrandom(2) should not be restricted in capability mode.

2018-08-18 06:31:49 +00:00 · 2018-08-18 06:31:49 +00:00 · 4f62d03ca0
commit 4f62d03ca0
parent 18548ca3f9
2 changed files with 6 additions and 0 deletions
--- a/sys/compat/freebsd32/capabilities.conf
+++ b/sys/compat/freebsd32/capabilities.conf
@ -134,6 +134,7 @@ getpgrp
 getpid
 getppid
 getpriority
+getrandom
 getresgid
 getresuid
 getrlimit
--- a/sys/kern/capabilities.conf
+++ b/sys/kern/capabilities.conf
@ -307,6 +307,11 @@ getrlimit
 getrusage
 getsid

+##
+## Allow getrandom
+##
+getrandom
+
 ##
 ## Allow querying socket state, subject to capability rights.
 ##