Refine implementation notes for priv(9): clarify ABI comments, mention

updating Jail's list of privileges.
This commit is contained in:
Robert Watson 2007-02-21 10:32:03 +00:00
parent 91dba98d82
commit 9fad4c2a12
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=166867

View File

@ -77,9 +77,14 @@ list of current privileges in
to see if one already exists for the class of privilege required.
Only if there is not an exact match should a new privilege be added to the
privilege list.
As the privilege number becomes encoded in the kernel module ABI, privileges
should only be appended to the list, not inserted in the list, and the list
sort order should not be changed.
As privilege numbers becomes encoded in the kernel module ABI, privilege
constants must not be changed as any kernel modules depending on privileges
will then need to be recompiled.
When adding a new privilege, be certain to also determine whether it should
be listed in
.Fn prison_priv_check ,
which includes a complete list of privileges granted to the root user in
.Xr jail 2.
.Pp
Certain catch-all privileges exist, such as
.Dv PRIV_DRIVER ,