From bdfe61e05e5211549078f740fd881388b24679ee Mon Sep 17 00:00:00 2001
From: Mark Johnston <markj@FreeBSD.org>
Date: Mon, 6 Jul 2020 16:34:29 +0000
Subject: [PATCH] Permit cpuset_(get|set)domain() in capability mode.

These system calls already perform validation of their parameters when
called in capability mode, identical to cpuset_(get|set)affinity().

MFC after:	1 week
Sponsored by:	The FreeBSD Foundation
---
 sys/kern/capabilities.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/kern/capabilities.conf b/sys/kern/capabilities.conf
index c465eca0bc6d..09d09515c816 100644
--- a/sys/kern/capabilities.conf
+++ b/sys/kern/capabilities.conf
@@ -149,8 +149,10 @@ copy_file_range
 ##
 #cpuset
 cpuset_getaffinity
+cpuset_getdomain
 #cpuset_getid
 cpuset_setaffinity
+cpuset_setdomain
 #cpuset_setid
 
 ##