Changes in Symbol.sys.map

28599a1e5f1b90676a818e0a4818cddd0839ad25 - sys: add renameat2(2) syscall

Thu, 26 Feb 2026 19:33:33 +0100

sys: add renameat2(2) syscallReviewed by: markjTested by: phoSponsored by: The FreeBSD FoundationMFC after: 1 weekDifferential revision: https://reviews.freebsd.org/D55539 List of files: /freebsd/lib/libsys/Symbol.sys.map

c1be185e3fb9afd6743683a8f5a43b9c364ab529 - libsys, libc: provide rfork_thread() and pdrfork_thread() on all arches

Mon, 26 Jan 2026 17:04:08 +0100

libsys, libc: provide rfork_thread() and pdrfork_thread() on all archesReviewed by: markjSponsored by: The FreeBSD FoundationMFC after: 1 weekDifferential revision: https://reviews.freebsd.org/D54898 List of files: /freebsd/lib/libsys/Symbol.sys.map

f10b4b6131d444c023a90c386cec4b0b8f525a1f - lib/libsys, lib/libc: export pdrfork(2)

Thu, 08 Jan 2026 03:04:06 +0100

lib/libsys, lib/libc: export pdrfork(2)Reviewed by: asomers, markjTested by: phoSponsored by: The FreeBSD FoundationMFC after: 1 weekDifferential revision: https://reviews.freebsd.org/D54592 List of files: /freebsd/lib/libsys/Symbol.sys.map

851dc7f859c23cab09a348bca03ab655534fb7e0 - jail: add jail descriptors

Thu, 04 Sep 2025 22:27:47 +0200

jail: add jail descriptorsSimilar to process descriptors, jail desriptors are allow jailadministration using the file descriptor interface instead of JIDs.They come from and can be used by jail_set(2) and jail_get(2),and there are two new system calls, jail_attach_jd(2) andjail_remove_jd(2).Reviewed by: bz, brooksRelnotes: yesDifferential Revision: https://reviews.freebsd.org/D43696 List of files: /freebsd/lib/libsys/Symbol.sys.map

9da2fe96ff2ea227e4d5f03ef92b55aabeabb7fc - kern: fix setgroups(2) and getgroups(2) to match other platforms

Fri, 15 Aug 2025 06:06:09 +0200

kern: fix setgroups(2) and getgroups(2) to match other platformsOn most other platforms observed, including OpenBSD, NetBSD, and Linux,these system calls have long since been converted to only touching thesupplementary groups of the process. This poses both portability andsecurity concerns in porting software to and from FreeBSD, as thissubtle difference is a landmine waiting to happen. Bugs have beendiscovered even in FreeBSD-local sources, since this behavior issomewhat unintuitive (see, e.g., fix 48fd05999b0f for chroot(8)).Now that the egid is tracked outside of cr_groups in our ucred, convertthe syscalls to deal with only supplementary groups. Some remainingstragglers in base that had baked in assumptions about these syscallsare fixed in the process to avoid heartburn in conversion.For relnotes: application developers should audit their use of bothsetgroups(2) and getgroups(2) for signs that they had assumed theprevious FreeBSD behavior of using the first element for the egid. Anycalls to setgroups() to clear groups that used a single array of thenow or soon-to-be egid can be converted to setgroups(0, NULL) calls toclear the supplementary groups entirely on all FreeBSD versions.Co-authored-by: olce (but bugs are likely mine)Relnotes: yes (see last paragraph)Reviewed by: kibDifferential Revision: https://reviews.freebsd.org/D51648 List of files: /freebsd/lib/libsys/Symbol.sys.map

cf65b5e43d7cdc67a932d089312c5a54342167db - libsys: Add inotify support

Thu, 03 Jul 2025 22:09:19 +0200

libsys: Add inotify supportInclude the two new syscalls in the symbol map.Reviewed by: kibMFC after: 3 monthsSponsored by: Klara, Inc.Differential Revision: https://reviews.freebsd.org/D50315 List of files: /freebsd/lib/libsys/Symbol.sys.map

92b393c0d28749b25efb6ad43632a7e80edd129b - libsys: export exterrctl symbol

Fri, 23 May 2025 07:23:37 +0200

libsys: export exterrctl symbolReviewed by: brooksSponsored by: The FreeBSD FoundationMFC after: 2 weeksDifferential revision: https://reviews.freebsd.org/D50483 List of files: /freebsd/lib/libsys/Symbol.sys.map

030c028255fd89c84c43fd63ab1574f21f040287 - kgssapi: remove the gssd_syscall

Sat, 01 Feb 2025 02:02:14 +0100

kgssapi: remove the gssd_syscallReviewed by: brooksDifferential Revision: https://reviews.freebsd.org/D48554 List of files: /freebsd/lib/libsys/Symbol.sys.map

ddb3eb4efe55e57c206f3534263c77b837aff1dc - New setcred() system call and associated MAC hooks

Thu, 18 Jul 2024 22:47:43 +0200

New setcred() system call and associated MAC hooksThis new system call allows to set all necessary credentials ofa process in one go: Effective, real and saved UIDs, effective, real andsaved GIDs, supplementary groups and the MAC label. Its advantage overstandard credential-setting system calls (such as setuid(), seteuid(),etc.) is that it enables MAC modules, such as MAC/do, to restrict theset of credentials some process may gain in a fine-grained manner.Traditionally, credential changes rely on setuid binaries that callmultiple credential system calls and in a specific order (setuid() mustbe last, so as to remain root for all other credential-setting calls,which would otherwise fail with insufficient privileges). Thispiecewise approach causes the process to transiently hold credentialsthat are neither the original nor the final ones. For the kernel toenforce that only certain transitions of credentials are allowed, eitherthese possibly non-compliant transient states have to disappear (bysetting all relevant attributes in one go), or the kernel must delaysetting or checking the new credentials. Delaying setting credentialscould be done, e.g., by having some mode where the standard system callscontribute to building new credentials but without committing them. Itcould be started and ended by a special system call. Delaying checkingcould mean that, e.g., the kernel only verifies the credentialstransition at the next non-credential-setting system call (we justmention this possibility for completeness, but are certainly notendorsing it).We chose the simpler approach of a new system call, as we don't expectthe set of credentials one can set to change often. It has theadvantages that the traditional system calls' code doesn't have to bechanged and that we can establish a special MAC protocol for it, byhaving some cleanup function called just before returning (this isa requirement for MAC/do), without disturbing the existing ones.The mac_cred_check_setcred() hook is passed the flags received bysetcred() (including the version) and both the old and new kernel's'struct ucred' instead of 'struct setcred' as this should simplifyevolving existing hooks as the 'struct setcred' structure evolves. Themac_cred_setcred_enter() and mac_cred_setcred_exit() hooks are alwayscalled by pairs around potential calls to mac_cred_check_setcred().They allow MAC modules to allocate/free data they may need in theirmac_cred_check_setcred() hook, as the latter is called under the currentprocess' lock, rendering sleepable allocations impossible. MAC/do isgoing to leverage these in a subsequent commit. A scheme wheremac_cred_check_setcred() could return ERESTART was considered but isincompatible with proper composition of MAC modules.While here, add missing includes and declarations for standaloneinclusion of both from kernel and userspace (for thelatter, it has been working thanks to already including).Reviewed by: brooksApproved by: markj (mentor)Relnotes: yesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D47618 List of files: /freebsd/lib/libsys/Symbol.sys.map

b165e9e3ea4e327fc421d81c2a89242bd8720780 - Add fchroot(2)

Fri, 29 Nov 2024 08:46:07 +0100

Add fchroot(2)This is similar to chroot(2), but takes a file descriptor insteadof path. Same syscall exists in NetBSD and Solaris. It is part of a largerpatch to make absolute pathnames usable in Capsicum mode, but shouldbe useful in other contexts too.Reviewed By: brooksSponsored by: Innovate UKDifferential Revision: https://reviews.freebsd.org/D41564 List of files: /freebsd/lib/libsys/Symbol.sys.map

1235d276b78a769bded01d51c9bf3cdc480db9fb - lib{c,sys}: stop exposing errno symbol

Fri, 27 Sep 2024 21:27:46 +0200

lib{c,sys}: stop exposing errno symbolOfficially since C11 (and in reality FreeBSD since 3.0 with commit1b46cb523df3) errno has been defined to be a macro. Rename the symbolto __libsys_errno and move it to FBSDprivate_1.0 and confine it entierlyto libsys for use by libthr. Add a FBSD_1.0 compat symbol for existingbinaries that were incorrectly linked to the errno symbol duringlibc.so.7's lifetime.This deliberately breaks linking software that directly links to errno.Such software is broken and will fail in surprising ways if it becomesthreaded (e.g., if it triggers loading of a pam or nss module thatuses threads.)Reviewed by: kibDifferential Revision: https://reviews.freebsd.org/D46780 List of files: /freebsd/lib/libsys/Symbol.sys.map

9b29fc89ae20a22516f54e146bfdfa0cfcd60b8b - Userspace enablement for getrlimitusage(2)

Fri, 20 Sep 2024 17:22:57 +0200

Userspace enablement for getrlimitusage(2)Reviewed by: markj, olceSponsored by: The FreeBSD FoundationMFC after: 1 weekDifferential revision: https://reviews.freebsd.org/D46747 List of files: /freebsd/lib/libsys/Symbol.sys.map

5b9273750200a5e96a953c81316e82656fbee260 - kcmp(2): fix whitespace in symbol list

Thu, 12 Sep 2024 13:35:04 +0200

kcmp(2): fix whitespace in symbol listFixes: 211bdd601ee51 Add kcmp(2) userspace bits List of files: /freebsd/lib/libsys/Symbol.sys.map

7448408656b05b7aa6f81c72366296c567591df9 - Make __libsys_interposing_slot libsys only

Mon, 22 Apr 2024 20:24:36 +0200

Make __libsys_interposing_slot libsys onlyReviewed by: kibDifferential Revision: https://reviews.freebsd.org/D44881 List of files: /freebsd/lib/libsys/Symbol.sys.map

6e83504c603157e9fc1660d2a1556036492662fc - Revert "lib{c,sys}: normalize export of openat, setcontext, and swapcontext"

Fri, 19 Apr 2024 23:21:46 +0200

Revert "lib{c,sys}: normalize export of openat, setcontext, and swapcontext"I put the symbols in the wrong file (should have beenlib/libc/sys/Symbol.map), added a duplicate pdfork entry due to a botchrebase, and there seems to be a issue with gcc13/binutils not exposingthe symbols so revert the whole thing while I debug.This reverts commit ee632fb9eb4a060a4087a7f5425bfe36e65cda61. List of files: /freebsd/lib/libsys/Symbol.sys.map

ee632fb9eb4a060a4087a7f5425bfe36e65cda61 - lib{c,sys}: normalize export of openat, setcontext, and swapcontext

Wed, 17 Apr 2024 00:26:29 +0200

lib{c,sys}: normalize export of openat, setcontext, and swapcontextList them in the symbol map rather than using the __sym_default toexpose them. This will allow later improvements in the stubimplementations in libc.so.Reviewed by: kibDifferential Revision: https://reviews.freebsd.org/D44113 List of files: /freebsd/lib/libsys/Symbol.sys.map

b12090676c8914ae576d9b5059c0683a7c1c75c5 - lib{c,sys}: correctly expose sched_getcpu

Fri, 15 Mar 2024 23:52:07 +0100

lib{c,sys}: correctly expose sched_getcpuWhen moving the implementation, I failed to move the symbol entry.Reviewed by: kibFixes: 84dd0c080ba5 libc: libc/gen/sched_getcpu_gen.c -> libsys/Differential Revision: https://reviews.freebsd.org/D44112 List of files: /freebsd/lib/libsys/Symbol.sys.map

d7847a8d351436a4654bd2c746bc9c04401160ee - lib{c,sys}: return wrapped syscall APIs to libc

Wed, 13 Mar 2024 18:42:01 +0100

lib{c,sys}: return wrapped syscall APIs to libcThese provide standard APIs, but are implemented using another systemcall (e.g., pipe implemented in terms of pipe2) or are interposed by thethreading library to support cancelation.After discussion with kib (see D44111), I've concluded that it isbetter to keep most public interfaces in libc with as littleas possible in libsys.Reviewed by: kibDifferential Revision: https://reviews.freebsd.org/D44241 List of files: /freebsd/lib/libsys/Symbol.sys.map

f7dbbbd1762f8f74d5a585230c56eca92e4fdb8b - libsys: don't expose sigwait wrapper

Wed, 13 Mar 2024 18:04:07 +0100

libsys: don't expose sigwait wrapperLong ago (e129c18a83ef) __sys_sigwait was wrapped to prevent sigwait()from returning with EINTR. Through a series of changes this wrapperbecome __libc_sigwait which was internal to libc and used solely in theinterposing table. To support a move of sigwait back to libc, move thiswrapper into libsys and rename it with an __libsys_ prefix.Reviewed by: kibDifferential Revision: https://reviews.freebsd.org/D44238 List of files: /freebsd/lib/libsys/Symbol.sys.map

882d9f4507a8fa518a967aeebd88585fb1e19a85 - lib{c,sys}: expose cap_sandboxed from libc/gen

Thu, 29 Feb 2024 00:23:33 +0100

lib{c,sys}: expose cap_sandboxed from libc/genIt's a thin wrapper on cap_getmode() implemented in libc, not a systemcall so the symbol should have been exposed by libc/gen/Symbol.mapalongside the implementation.Reviewed by: kibDifferential Revision: https://reviews.freebsd.org/D44110 List of files: /freebsd/lib/libsys/Symbol.sys.map