From 8bf0882e186effbd3d742ce17613cf9dfb81ce0c Mon Sep 17 00:00:00 2001
From: Kyle Evans <kevans@FreeBSD.org>
Date: Wed, 3 Jan 2024 16:18:00 -0600
Subject: [PATCH] bhyveload: enter capability mode after we setup the vcpu

Reviewed by:	allanjude (earlier version), emaste, markj
Differential Revision:	https://reviews.freebsd.org/D43286
---
 usr.sbin/bhyveload/bhyveload.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/usr.sbin/bhyveload/bhyveload.c b/usr.sbin/bhyveload/bhyveload.c
index 855ce5947a9..124c1141bff 100644
--- a/usr.sbin/bhyveload/bhyveload.c
+++ b/usr.sbin/bhyveload/bhyveload.c
@@ -78,6 +78,7 @@
 #include <termios.h>
 #include <unistd.h>
 
+#include <capsicum_helpers.h>
 #include <vmmapi.h>
 
 #include "userboot.h"
@@ -868,6 +869,12 @@ main(int argc, char** argv)
 
 	vcpu = vm_vcpu_open(ctx, BSP);
 
+	caph_cache_catpages();
+	if (caph_enter() < 0) {
+		perror("caph_enter");
+		exit(1);
+	}
+
 	/*
 	 * setjmp in the case the guest wants to swap out interpreter,
 	 * cb_swap_interpreter will swap out loader as appropriate and set