d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow getdtablesize in capability mode

Browse Source 
getdtablesize is "trivial global state" and is similar to
getrlimit(RLIMIT_NOFILE), so should be permitted in capability mode.

Reviewed by:	oshogbo
MFC after:	1 week
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D7719
This commit is contained in:
emaste 2016-08-31 18:33:15 +00:00
parent fd98639967
commit a4d82eedc1
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
sys/kern/capabilities.conf
View File

@ -248,6 +248,7 @@ getdirentries
## Allow querying certain trivial global state.
##
getdomainname
getdtablesize
##
## Allow querying current process credential state.