PERFORCE change 134079 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=134079

Change 134079 by rwatson at rwatson_freebsd_capabilities on 2008/01/25 13:31:59

	Return ENOSYS rather than EPERM when a system call isn't available
	in capability mode.

Affected files ...

.. //depot/projects/trustedbsd/capabilities/src/sys/i386/i386/trap.c#3 edit

Differences ...

==== //depot/projects/trustedbsd/capabilities/src/sys/i386/i386/trap.c#3 (text+ko) ====

@@ -1028,13 +1028,11 @@
 	/*
 	 * In capabilities mode, we only allow access to system calls flagged
 	 * SYF_CAPENABLED.
-	 *
-	 * XXXRW: Perhaps ENOTCAPABLE?
 	 */
 	if (error == 0) {
 		if (!(callp->sy_flags & SYF_CAPENABLED) &&
 		    (td->td_ucred->cr_flags & CRED_FLAG_CAPMODE))
-			error = EPERM;
+			error = ENOSYS;
 	}
 #endif