aboutsummaryrefslogtreecommitdiff
path: root/sys/kern/capabilities.conf
Commit message (Expand)AuthorAgeFilesLines
* syscalls.master: switch to CAPENABLED flagsBrooks Davis2021-09-011-783/+0
* Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9).Ka Ho Ng2021-08-051-0/+5
* Add aio_writev and aio_readvAlan Somers2021-01-031-0/+2
* Expose eventfd in the native API/ABI using a new __specialfd syscallKonstantin Belousov2020-12-271-0/+5
* Permit cpuset_(get|set)domain() in capability mode.Mark Johnston2020-07-061-0/+2
* Implement a close_range(2) syscallKyle Evans2020-04-121-0/+1
* capabilities.conf: provide information about capmode permitted syscallsEd Maste2020-03-301-0/+5
* Allow getloginclass in capability modeEd Maste2020-02-121-0/+1
* Allow fdatasync in capability modeEd Maste2020-02-121-0/+1
* Add a way to manage thread signal mask using shared word, instead of syscall.Konstantin Belousov2020-02-091-0/+1
* Add a shm_open2 syscall to support upcoming memfd_createKyle Evans2019-09-251-0/+1
* Add sysctlbyname system callMateusz Guzik2019-09-031-0/+1
* Enable copy_file_range(2) in capability mode.Mark Johnston2019-07-301-0/+5
* Introduce funlinkat syscall that always us to check if we are removingMariusz Zaborski2019-04-061-0/+1
* capsicum: allow ppoll(2) in capability modeMariusz Zaborski2018-11-041-1/+1
* getrandom(2) should not be restricted in capability mode.Xin LI2018-08-181-0/+5
* Name the implementation of brk and sbrk sys_break().Brooks Davis2018-06-141-1/+1
* allow posix_fallocate in capability modeEd Maste2017-10-121-0/+1
* Correct sysent flags for dynamically loaded syscalls.Konstantin Belousov2017-07-141-0/+4
* Allow cpuset_{get,set}affinity in capabilities modeAllan Jude2017-05-241-4/+3
* Commit the 64-bit inode project.Konstantin Belousov2017-05-231-0/+5
* disallow open(2) in capability modeEd Maste2017-05-221-8/+0
* Update capabilities.conf commentEd Maste2016-09-081-0/+4
* Allow getdtablesize in capability modeEd Maste2016-08-311-0/+1
* Remove unusedd and obsolete openbsd_poll system call. (Phase 1)George V. Neville-Neil2016-08-181-8/+0
* Garbage collect _umtx_lock(2)/_umtx_unlock(2) references removed in r263318.Bryan Drewery2016-08-171-2/+0
* Add futimens and utimensat system calls.Jilles Tjoelker2015-01-231-1/+3
* Allow sigwait(2) in capabilities mode.Christian S.J. Peron2014-01-281-0/+1
* Allow for pselect(2) in capability mode.Pawel Jakub Dawidek2013-12-151-1/+2
* - Remove mac_get_fd/mac_set_fd - those are not syscalls. The __mac_get_fd() andPawel Jakub Dawidek2013-11-061-8/+1
* Sort properly.Pawel Jakub Dawidek2013-09-071-1/+1
* Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek2013-09-051-2/+1
* Add pipe2() system call.Jilles Tjoelker2013-05-011-0/+1
* Add accept4() system call.Jilles Tjoelker2013-05-011-0/+1
* Implement chflagsat(2) system call, similar to fchmodat(2), but operates onPawel Jakub Dawidek2013-03-211-0/+1
* Sort syscalls properly.Pawel Jakub Dawidek2013-03-151-1/+1
* - Implement two new system calls:Pawel Jakub Dawidek2013-03-021-8/+4
* Merge Capsicum overhaul:Pawel Jakub Dawidek2013-03-021-8/+10
* Allow to use kill(2) in capability mode, but process can send a signal onlyPawel Jakub Dawidek2012-11-271-0/+5
* Add missing system calls.Pawel Jakub Dawidek2012-05-311-0/+5
* There is no rmdirat system call. Weird, I know.Pawel Jakub Dawidek2012-05-311-1/+0
* Add experimental support for process descriptorsJonathan Anderson2011-08-181-1/+1
* Trim some warnings and notes from capabilities.conf -- these are left overRobert Watson2011-08-131-6/+1
* Allow openat(2), fstatat(2), etc. in capability mode.Jonathan Anderson2011-08-131-25/+19
* Continue to introduce Capsicum Capability Mode support:Robert Watson2011-03-011-0/+756