Permit cpuset_(get|set)domain() in capability mode.

These system calls already perform validation of their parameters when called in capability mode, identical to cpuset_(get|set)affinity(). MFC after: 1 week Sponsored by: The FreeBSD Foundation
2020-07-06 16:34:29 +00:00 · 2020-07-06 16:34:29 +00:00 · bdfe61e05e
commit bdfe61e05e
parent e94fdc3833
1 changed files with 2 additions and 0 deletions
--- a/sys/kern/capabilities.conf
+++ b/sys/kern/capabilities.conf
@ -149,8 +149,10 @@ copy_file_range
 ##
 #cpuset
 cpuset_getaffinity
+cpuset_getdomain
 #cpuset_getid
 cpuset_setaffinity
+cpuset_setdomain
 #cpuset_setid

 ##