Add "options CAPABILITY_MODE" and "options CAPABILITIES" to GENERIC kernel
configurations for various architectures in FreeBSD 10.x. This allows basic Capsicum functionality to be used in the default FreeBSD configuration on non-embedded architectures; process descriptors are not yet enabled by default. MFC after: 3 months Sponsored by: Google, Inc
This commit is contained in:
parent
792fdc63c1
commit
a7ba7afe9c
@ -60,6 +60,8 @@ options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed.
|
|||||||
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
|
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
|
||||||
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
||||||
options AUDIT # Security event auditing
|
options AUDIT # Security event auditing
|
||||||
|
options CAPABILITY_MODE # Capsicum capability mode
|
||||||
|
options CAPABILITIES # Capsicum capabilities
|
||||||
options MAC # TrustedBSD MAC Framework
|
options MAC # TrustedBSD MAC Framework
|
||||||
#options KDTRACE_FRAME # Ensure frames are compiled in
|
#options KDTRACE_FRAME # Ensure frames are compiled in
|
||||||
#options KDTRACE_HOOKS # Kernel DTrace hooks
|
#options KDTRACE_HOOKS # Kernel DTrace hooks
|
||||||
|
@ -61,6 +61,8 @@ options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed.
|
|||||||
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
|
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
|
||||||
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
||||||
options AUDIT # Security event auditing
|
options AUDIT # Security event auditing
|
||||||
|
options CAPABILITY_MODE # Capsicum capability mode
|
||||||
|
options CAPABILITIES # Capsicum capabilities
|
||||||
options MAC # TrustedBSD MAC Framework
|
options MAC # TrustedBSD MAC Framework
|
||||||
#options KDTRACE_HOOKS # Kernel DTrace hooks
|
#options KDTRACE_HOOKS # Kernel DTrace hooks
|
||||||
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
||||||
|
@ -26,6 +26,8 @@ ident GENERIC
|
|||||||
makeoptions DEBUG=-g # Build kernel with debug information.
|
makeoptions DEBUG=-g # Build kernel with debug information.
|
||||||
|
|
||||||
options AUDIT # Security event auditing
|
options AUDIT # Security event auditing
|
||||||
|
options CAPABILITY_MODE # Capsicum capability mode
|
||||||
|
options CAPABILITIES # Capsicum capabilities
|
||||||
options CD9660 # ISO 9660 Filesystem
|
options CD9660 # ISO 9660 Filesystem
|
||||||
options COMPAT_FREEBSD7 # Compatible with FreeBSD7
|
options COMPAT_FREEBSD7 # Compatible with FreeBSD7
|
||||||
options FFS # Berkeley Fast Filesystem
|
options FFS # Berkeley Fast Filesystem
|
||||||
|
@ -63,6 +63,8 @@ options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
|
|||||||
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
|
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
|
||||||
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
||||||
options AUDIT # Security event auditing
|
options AUDIT # Security event auditing
|
||||||
|
options CAPABILITY_MODE # Capsicum capability mode
|
||||||
|
options CAPABILITIES # Capsicum capabilities
|
||||||
options MAC # TrustedBSD MAC Framework
|
options MAC # TrustedBSD MAC Framework
|
||||||
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
||||||
|
|
||||||
|
@ -64,6 +64,8 @@ options SYSVSEM #SYSV-style semaphores
|
|||||||
options _KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time extensions
|
options _KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time extensions
|
||||||
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
||||||
options AUDIT # Security event auditing
|
options AUDIT # Security event auditing
|
||||||
|
options CAPABILITY_MODE # Capsicum capability mode
|
||||||
|
options CAPABILITIES # Capsicum capabilities
|
||||||
options MAC # TrustedBSD MAC Framework
|
options MAC # TrustedBSD MAC Framework
|
||||||
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
||||||
|
|
||||||
|
@ -60,6 +60,8 @@ options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
|
|||||||
options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed.
|
options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed.
|
||||||
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
|
||||||
options AUDIT # Security event auditing
|
options AUDIT # Security event auditing
|
||||||
|
options CAPABILITY_MODE # Capsicum capability mode
|
||||||
|
options CAPABILITIES # Capsicum capabilities
|
||||||
options MAC # TrustedBSD MAC Framework
|
options MAC # TrustedBSD MAC Framework
|
||||||
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
options INCLUDE_CONFIG_FILE # Include this file in kernel
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user