capsicum_helpers: Add FIODTYPE to default ioctls allowed

FIODTYPE will be needed by hexdump(1) to speed up the -s flag on devices
that should be able to support fseek(3); specifically, in an attempt to
correct for the fact that most tape drives don't support seeking yet don't
indicate as such when fseeko(3) is invoked. Related: D10939

Reviewed by:	cem, emaste, oshogbo
Approved by:	emaste (mentor)
Differential Revision:	https://reviews.freebsd.org/D10937
This commit is contained in:
Kyle Evans 2017-08-09 18:15:07 +00:00
parent b5669d0aa8
commit 3e13c1fa27
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=322324

View file

@ -31,6 +31,7 @@
#include <sys/param.h>
#include <sys/capsicum.h>
#include <sys/ioctl.h>
#include <errno.h>
#include <nl_types.h>
@ -47,7 +48,7 @@ static __inline int
caph_limit_stream(int fd, int flags)
{
cap_rights_t rights;
unsigned long cmds[] = { TIOCGETA, TIOCGWINSZ };
unsigned long cmds[] = { TIOCGETA, TIOCGWINSZ, FIODTYPE };
cap_rights_init(&rights, CAP_FCNTL, CAP_FSTAT, CAP_IOCTL);