Page MenuHomeFreeBSD

proccontrol(1): implement 'nonewprivs'
ClosedPublic

Authored by trasz on Jun 29 2021, 4:43 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Oct 9, 6:47 AM
Unknown Object (File)
Sep 2 2025, 11:28 AM
Unknown Object (File)
Sep 2 2025, 9:34 AM
Unknown Object (File)
Aug 17 2025, 5:27 AM
Unknown Object (File)
Jul 25 2025, 2:09 AM
Unknown Object (File)
Jul 23 2025, 9:22 AM
Unknown Object (File)
Jul 21 2025, 6:52 AM
Unknown Object (File)
Jul 17 2025, 12:48 PM
Subscribers

Details

Summary

This adds the 'nonewprivs' mode, corresponding to newly added
procctl(2) commands PROC_NO_NEW_PRIVS_CTL and PROC_NO_NEW_PRIVS_STATUS.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

trasz requested review of this revision.Jun 29 2021, 4:43 PM

I wonder if it is better named 'nosetid', both in syscall and there.

This revision is now accepted and ready to land.Jun 30 2021, 5:27 AM
In D30940#696482, @kib wrote:

I wonder if it is better named 'nosetid', both in syscall and there.

I've been thinking about it - "NO_NEW_PRIVS" is a rather silly name - but IMHO given that we're copying Linux semantics, we ought to also copy the name; it will make it less confusing and easier to grep for.

This revision was automatically updated to reflect the committed changes.