Date: Fri, 14 May 2010 19:21:18 GMT From: Jonathan Anderson <jona@FreeBSD.org> To: Perforce Change Reviews <perforce@FreeBSD.org> Subject: PERFORCE change 178261 for review Message-ID: <201005141921.o4EJLITx050706@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://p4web.freebsd.org/@@178261?ac=10 Change 178261 by jona@jona-belle-freebsd8 on 2010/05/14 19:20:31 Allow fstatat() Affected files ... .. //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#27 edit .. //depot/projects/trustedbsd/capabilities/src/sys/kern/init_sysent.c#47 edit .. //depot/projects/trustedbsd/capabilities/src/sys/kern/vfs_syscalls.c#30 edit Differences ... ==== //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#27 (text+ko) ==== @@ -38,7 +38,7 @@ ## - sys_exit(2), abort2(2) and close(2) are very important. ## - Sorted alphabetically, please keep it that way. ## -## $P4: //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#26 $ +## $P4: //depot/projects/trustedbsd/capabilities/src/sys/kern/capabilities.conf#27 $ ## ## @@ -457,6 +457,7 @@ ## files which are not "under" the directory FD given to the syscall. ## faccessat +fstatat fchmodat futimesat mkdirat ==== //depot/projects/trustedbsd/capabilities/src/sys/kern/init_sysent.c#47 (text+ko) ==== @@ -527,7 +527,7 @@ { AS(fchmodat_args), (sy_call_t *)fchmodat, AUE_FCHMODAT, NULL, 0, 0, SYF_CAPENABLED }, /* 490 = fchmodat */ { AS(fchownat_args), (sy_call_t *)fchownat, AUE_FCHOWNAT, NULL, 0, 0, 0 }, /* 491 = fchownat */ { AS(fexecve_args), (sy_call_t *)fexecve, AUE_FEXECVE, NULL, 0, 0, SYF_CAPENABLED }, /* 492 = fexecve */ - { AS(fstatat_args), (sy_call_t *)fstatat, AUE_FSTATAT, NULL, 0, 0, 0 }, /* 493 = fstatat */ + { AS(fstatat_args), (sy_call_t *)fstatat, AUE_FSTATAT, NULL, 0, 0, SYF_CAPENABLED }, /* 493 = fstatat */ { AS(futimesat_args), (sy_call_t *)futimesat, AUE_FUTIMESAT, NULL, 0, 0, SYF_CAPENABLED }, /* 494 = futimesat */ { AS(linkat_args), (sy_call_t *)linkat, AUE_LINKAT, NULL, 0, 0, 0 }, /* 495 = linkat */ { AS(mkdirat_args), (sy_call_t *)mkdirat, AUE_MKDIRAT, NULL, 0, 0, SYF_CAPENABLED }, /* 496 = mkdirat */ ==== //depot/projects/trustedbsd/capabilities/src/sys/kern/vfs_syscalls.c#30 (text+ko) ==== @@ -2425,9 +2425,9 @@ if (flag & ~AT_SYMLINK_NOFOLLOW) return (EINVAL); - NDINIT_AT(&nd, LOOKUP, ((flag & AT_SYMLINK_NOFOLLOW) ? NOFOLLOW : + NDINIT_ATRIGHTS(&nd, LOOKUP, ((flag & AT_SYMLINK_NOFOLLOW) ? NOFOLLOW : FOLLOW) | LOCKSHARED | LOCKLEAF | AUDITVNODE1 | MPSAFE, pathseg, - path, fd, td); + path, fd, CAP_FSTAT | CAP_ATBASE, td); if ((error = namei(&nd)) != 0) return (error);
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201005141921.o4EJLITx050706>