jail: allow jails to call settimeofday() if allow.settime is enabled

[ivy]

Summary

this extends the existing behaviour to allow calling settimeofday() in
addition to clock_settime(). this is required for chrony, which uses
settimeofday() to step the clock.

[jamie]

It looks very basic, and is good by me. But I'm inviting Mariusz to make sure he didn't have a particular reason not to include PRIV_SETTIMEOFDAY when he added PRIV_CLOCK_SETTIME.

[imp]

Seems reasonable to me. Setting the time is setting the time. They both call settime() in kern_time.c under the covers. Not even sure why they are separate privs, unless the slight difference in only being able to set one of the clocks matters. But since there are two privs, this seems fine given the jail permission granularity.

[ivy]

adding kevans, des (mentors) to review. i am ready to land this but i will wait for Mariusz input first.

[oshogbo]

I have missed this one. I simply looked into syscalls from ntpd.

[ivy]

closing this manually as it was committed as 1589eb2e8764623d1c32982b52088842519dfd11. i think phab missed this because i put <> around the Differential Revision tag in the commit message, which i'll stop doing.

[des]

In D49846#1138487, @ivy wrote:

i think phab missed this because i put <> around the Differential Revision tag in the commit message, which i'll stop doing.

You really should install freebsd-git-devtools and use git arc stage to prepare commits from phab reviews.