Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Feb 2009 10:44:39 +0000 (UTC)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r189153 - head/sys/sys
Message-ID:  <200902281044.n1SAidBK006329@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: rwatson
Date: Sat Feb 28 10:44:39 2009
New Revision: 189153
URL: http://svn.freebsd.org/changeset/base/189153

Log:
  Remove PRIV_ROOT -- all system privileges must now be explicitly named
  in support of forthcoming work on a fine-grained privilege mechanism.
  
  Facilitated by:	bz, thompsa, rink

Modified:
  head/sys/sys/priv.h

Modified: head/sys/sys/priv.h
==============================================================================
--- head/sys/sys/priv.h	Sat Feb 28 10:43:10 2009	(r189152)
+++ head/sys/sys/priv.h	Sat Feb 28 10:44:39 2009	(r189153)
@@ -52,13 +52,7 @@
 /*
  * Track beginning of privilege list.
  */
-#define	_PRIV_LOWEST	0
-
-/*
- * PRIV_ROOT is a catch-all for as yet unnamed privileges.  No new
- * references to this privilege should be added.
- */
-#define	PRIV_ROOT	1	/* Catch-all during development. */
+#define	_PRIV_LOWEST	1
 
 /*
  * The remaining privileges typically correspond to one or a small
@@ -67,6 +61,7 @@
  * privileges, such as the ability to reboot, and then loosely by
  * subsystem, indicated by a subsystem name.
  */
+#define	_PRIV_ROOT		1	/* Removed. */
 #define	PRIV_ACCT		2	/* Manage process accounting. */
 #define	PRIV_MAXFILES		3	/* Exceed system open files limit. */
 #define	PRIV_MAXPROC		4	/* Exceed system processes limit. */



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200902281044.n1SAidBK006329>