sys_capability.c: update the source of CAPENABLED

System calls allowed in capability mode have been specified by the
CAPENABLED flag in syscalls.master since 2021.

1 files changed, 6 insertions, 5 deletions

diff --git a/sys/kern/sys_capability.c b/sys/kern/sys_capability.c
index e71dc4f3285b..d43102ab7849 100644
--- a/sys/kern/sys_capability.c
+++ b/sys/kern/sys_capability.c
@@ -50,11 +50,12 @@
  * derived from existing capabilities, but only if they have the same or a
  * strict subset of the rights on the original capability.
  *
- * System calls permitted in capability mode are defined in capabilities.conf;
- * calls must be carefully audited for safety to ensure that they don't allow
- * escape from a sandbox.  Some calls permit only a subset of operations in
- * capability mode -- for example, shm_open(2) is limited to creating
- * anonymous, rather than named, POSIX shared memory objects.
+ * System calls permitted in capability mode are defined by CAPENABLED
+ * flags in syscalls.master; calls must be carefully audited for safety
+ * to ensure that they don't allow escape from a sandbox.  Some calls
+ * permit only a subset of operations in capability mode -- for example,
+ * shm_open(2) is limited to creating anonymous, rather than named,
+ * POSIX shared memory objects.
  */
 
 #include <sys/cdefs.h>