Date: Sat, 13 Aug 2011 17:22:16 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r224852 - head/sys/kern Message-ID: <201108131722.p7DHMG0s026070@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: rwatson Date: Sat Aug 13 17:22:16 2011 New Revision: 224852 URL: http://svn.freebsd.org/changeset/base/224852 Log: Trim some warnings and notes from capabilities.conf -- these are left over from Capsicum development, and no longer apply. Approved by: re (kib) Sponsored by: Google Inc Modified: head/sys/kern/capabilities.conf Modified: head/sys/kern/capabilities.conf ============================================================================== --- head/sys/kern/capabilities.conf Sat Aug 13 17:21:50 2011 (r224851) +++ head/sys/kern/capabilities.conf Sat Aug 13 17:22:16 2011 (r224852) @@ -196,7 +196,7 @@ fpathconf ## ## Allow various file descriptor-based I/O operations, subject to capability -## rights. mmap(2) requires further attention. +## rights. ## freebsd6_ftruncate freebsd6_lseek @@ -334,8 +334,6 @@ issetugid ## Allow kevent(2), as we will authorize based on capability rights on the ## target descriptor. ## -## XXXRW: Do we do this? -## kevent ## @@ -404,9 +402,6 @@ mlockall ## Allow memory mapping a file descriptor, and updating protections, subject ## to capability rights. ## -## XXXRW: We currently don't properly mask VM protections using capability -## rights. -## mmap mprotect
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201108131722.p7DHMG0s026070>