Skip to content

Conversation

@fslongjin
Copy link
Member

@fslongjin fslongjin commented Sep 25, 2025

  • Add capability management system calls to DragonOS kernel
  • Implement capget/capset with version negotiation and capability rules
  • Add documentation for sys_capget/sys_capset design and implementation
  • Add test cases for both system calls
  • Update documentation structure to include new capability syscall documentation

- Add sys_capget module and implementation for retrieving process capabilities
- Add comprehensive test suite for capget functionality

Signed-off-by: longjin <longjin@DragonOS.org>
@github-actions github-actions bot added the enhancement New feature or request label Sep 25, 2025
- 添加了完整的 capability 系统调用实现,包括版本协商、能力集规则验证
- 新增 sys_capget 和 sys_capset 系统调用,对齐 Linux 接口
- 实现能力集规则:effective 必须受限于 permitted,permitted
不允许提升,inheritable 受 CAP_SETPCAP 和 bounding set 限制
- 添加 set_cred 方法支持原子替换进程凭据
- 更新文档,添加 sys_capget_capset 设计说明
- 增加测试用例验证系统调用行为和边界条件

Signed-off-by: longjin <longjin@DragonOS.org>
@fslongjin fslongjin changed the title feat(syscall): add capget system call implementation feat: implement sys_capget and sys_capset system calls Sep 25, 2025
@fslongjin fslongjin merged commit cb2487a into DragonOS-Community:master Sep 25, 2025
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant