Author: glebius
Date: Thu Apr 27 05:48:52 2017
New Revision: 317483
URL: https://svnweb.freebsd.org/changeset/base/317483

Log:
  We need CAP_MMAP_RW on memfd, since init_msix_table() may call mmap().

Modified:
  head/usr.sbin/bhyve/pci_passthru.c

Modified: head/usr.sbin/bhyve/pci_passthru.c
==============================================================================
--- head/usr.sbin/bhyve/pci_passthru.c  Thu Apr 27 02:17:45 2017        
(r317482)
+++ head/usr.sbin/bhyve/pci_passthru.c  Thu Apr 27 05:48:52 2017        
(r317483)
@@ -703,6 +703,7 @@ passthru_init(struct vmctx *ctx, struct 
 
 #ifndef WITHOUT_CAPSICUM
        cap_rights_clear(&rights, CAP_IOCTL);
+       cap_rights_set(&rights, CAP_MMAP_RW);
        if (cap_rights_limit(memfd, &rights) == -1 && errno != ENOSYS)
                errx(EX_OSERR, "Unable to apply rights for sandbox");
 #endif
_______________________________________________
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

Reply via email to