]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
- Add NOCAPCHECK flag to namei that allows lookup to work even if the process
authorpjd <pjd@FreeBSD.org>
Tue, 27 Nov 2012 10:32:35 +0000 (10:32 +0000)
committerpjd <pjd@FreeBSD.org>
Tue, 27 Nov 2012 10:32:35 +0000 (10:32 +0000)
commit7a831b4b8cd8e6d31377b49c6c08ad2bc20848ac
tree5567ee42ba1d9618d36487ea30a4eda41cdab69f
parent6a3d82fdf4470b3a2ad5c31c7c760ec65b4a4ade
- Add NOCAPCHECK flag to namei that allows lookup to work even if the process
  is in capability mode.
- Add VN_OPEN_NOCAPCHECK flag for vn_open_cred() to will ne converted into
  NOCAPCHECK namei flag.

This functionality will be used to enable core dumps for sandboxed processes.

Reviewed by: rwatson
Obtained from: WHEEL Systems
MFC after: 2 weeks
sys/kern/vfs_lookup.c
sys/kern/vfs_vnops.c
sys/sys/namei.h
sys/sys/vnode.h