git: 6684779b3215 - main - capsicum-test: rights are propagated on accept(2)

From: Ed Maste <emaste_at_FreeBSD.org>
Date: Mon, 07 Oct 2024 19:40:28 UTC
The branch main has been updated by emaste:

URL: https://cgit.FreeBSD.org/src/commit/?id=6684779b321590c71f162390bcf28feee2a3b967

commit 6684779b321590c71f162390bcf28feee2a3b967
Author:     Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2024-10-07 18:26:58 +0000
Commit:     Ed Maste <emaste@FreeBSD.org>
CommitDate: 2024-10-07 19:40:06 +0000

    capsicum-test: rights are propagated on accept(2)
    
    As of commit 85b0f9de11c3 ("capsicum: propagate rights on accept(2)")
    a capability is generated from accept(cap_fd,...).  Enable the
    corresponding test code.
    
    PR:             201052
    Reviewed by:    oshogbo
    Sponsored by:   The FreeBSD Foundation
    Differential Revision: https://reviews.freebsd.org/D46994
---
 contrib/capsicum-test/capsicum-freebsd.h | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/contrib/capsicum-test/capsicum-freebsd.h b/contrib/capsicum-test/capsicum-freebsd.h
index 96ceb9b6d5f1..da7bb38f073b 100644
--- a/contrib/capsicum-test/capsicum-freebsd.h
+++ b/contrib/capsicum-test/capsicum-freebsd.h
@@ -59,10 +59,9 @@ typedef unsigned long cap_ioctl_t;
 // Too many links
 #define E_TOO_MANY_LINKS EMLINK
 
-// TODO(FreeBSD): uncomment if/when FreeBSD propagates rights on accept.
-// FreeBSD does not generate a capability from accept(cap_fd,...).
-// https://bugs.freebsd.org/201052
-// #define CAP_FROM_ACCEPT
+// As of commit 85b0f9de11c3 ("capsicum: propagate rights on accept(2)")
+// FreeBSD generates a capability from accept(cap_fd,...).
+#define CAP_FROM_ACCEPT
 // TODO(FreeBSD): uncomment if/when FreeBSD propagates rights on sctp_peeloff.
 // FreeBSD does not generate a capability from sctp_peeloff(cap_fd,...).
 // https://bugs.freebsd.org/201052