Robert Watson 96fcc75fdf Add initial support for Capsicum's Capability Mode to the FreeBSD kernel, ...

compiled conditionally on options CAPABILITIES:

Add a new credential flag, CRED_FLAG_CAPMODE, which indicates that a
subject (typically a process) is in capability mode.

Add two new system calls, cap_enter(2) and cap_getmode(2), which allow
setting and querying (but never clearing) the flag.

Export the capability mode flag via process information sysctls.

Sponsored by:	Google, Inc.
Reviewed by:	anderson
Discussed with:	benl, kris, pjd
Obtained from:	Capsicum Project
MFC after:	3 months

2011-03-01 13:23:37 +00:00

..

freebsd32

Add initial support for Capsicum's Capability Mode to the FreeBSD kernel,

2011-03-01 13:23:37 +00:00

ia32

Create shared (readonly) page. Each ABI may specify the use of page by

2011-01-08 16:13:44 +00:00

linprocfs

Update interface stats counters to match the current format in linux and

2011-01-31 00:09:52 +00:00

linsysfs

Remove no-op assignment.

2010-11-15 23:14:14 +00:00

linux

Use umtx_key objects to uniquely identify futexes. Private futexes in

2011-02-23 13:23:28 +00:00

ndis

Use the cprd_mem field when setting the start and length for a memory

2011-02-23 21:45:28 +00:00

netbsd

…

svr4

Add macro DECLARE_MODULE_TIED to denote a module as requiring the

2010-10-12 09:18:17 +00:00

x86bios

Prefer pmap_unmapbios() over pmap_unmapdev(). The binary does not change

2010-10-05 18:38:23 +00:00