svn commit: r332164 - stable/11/lib/libcapsicum

[Kyle Evans]

Author: kevans
Date: Sat Apr  7 03:51:19 2018
New Revision: 332164
URL: https://svnweb.freebsd.org/changeset/base/332164

Log:
  MFC r322324: capsicum_helpers: Add FIODTYPE to default ioctls allowed
  
  FIODTYPE will be needed by hexdump(1) to speed up the -s flag on devices
  that should be able to support fseek(3); specifically, in an attempt to
  correct for the fact that most tape drives don't support seeking yet don't
  indicate as such when fseeko(3) is invoked.

Modified:
  stable/11/lib/libcapsicum/capsicum_helpers.h
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/lib/libcapsicum/capsicum_helpers.h
==============================================================================
--- stable/11/lib/libcapsicum/capsicum_helpers.h	Sat Apr  7 03:02:07 2018	(r332163)
+++ stable/11/lib/libcapsicum/capsicum_helpers.h	Sat Apr  7 03:51:19 2018	(r332164)
@@ -31,6 +31,7 @@
 
 #include <sys/param.h>
 #include <sys/capsicum.h>
+#include <sys/ioctl.h>
 
 #include <errno.h>
 #include <nl_types.h>
@@ -47,7 +48,7 @@ static __inline int
 caph_limit_stream(int fd, int flags)
 {
 	cap_rights_t rights;
-	unsigned long cmds[] = { TIOCGETA, TIOCGWINSZ };
+	unsigned long cmds[] = { TIOCGETA, TIOCGWINSZ, FIODTYPE };
 
 	cap_rights_init(&rights, CAP_EVENT, CAP_FCNTL, CAP_FSTAT,
 	    CAP_IOCTL, CAP_SEEK);