libusb: capsicumize libusb

FreeBSD's libusb has three components: libusb01, libusb10, and libusb20.

libusb20 handles communication with character devices. We now requires a
backend context for libusb20. The backend context contains contains the
capsicumized usbctrl fd and usb directory (/dev/usb) fd so that the
library user can enter the capiblity mode safely while using libusb.

libusb10 is updated to support capabilities via a context option. Since
libusb allows general read/write access, we preserve all possible
capabilities when passing backend context to libusb20. It is the
responsibility of the libusb user to call cap_enter() at an appropriate
time.

All base system tools using libusb and libusb20 have been updated to
support Capsicum.

Reviewed by:    adrian, markj
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D51865

1 files changed, 9 insertions, 4 deletions

diff --git a/lib/libusb/Symbol.map b/lib/libusb/Symbol.map
index 46bd1d8aeace..310bb4c35a21 100644
--- a/lib/libusb/Symbol.map
+++ b/lib/libusb/Symbol.map
@@ -120,10 +120,6 @@ FBSD_1.8 {
 	libusb_wait_for_event;
 	libusb_wrap_sys_device;
 	libusb20_be_add_dev_quirk;
-	libusb20_be_alloc;
-	libusb20_be_alloc_default;
-	libusb20_be_alloc_linux;
-	libusb20_be_alloc_ugen20;
 	libusb20_be_dequeue_device;
 	libusb20_be_device_foreach;
 	libusb20_be_enqueue_device;
@@ -258,3 +254,12 @@ FBSD_1.8 {
 	usb_set_debug;
 	usb_strerror;
 };
+
+FBSD_1.9 {
+	libusb20_be_alloc;
+	libusb20_be_alloc_default;
+	libusb20_be_alloc_linux;
+	libusb20_be_alloc_ugen20;
+	libusb20_be_ctx_alloc;
+	libusb20_be_ctx_free;
+};