Page MenuHomeFreeBSD

proccontrol(1): implement 'nonewprivs'
ClosedPublic

Authored by trasz on Jun 29 2021, 4:43 PM.

Details

Summary

This adds the 'nonewprivs' mode, corresponding to newly added
procctl(2) commands PROC_NO_NEW_PRIVS_CTL and PROC_NO_NEW_PRIVS_STATUS.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

trasz requested review of this revision.Jun 29 2021, 4:43 PM

I wonder if it is better named 'nosetid', both in syscall and there.

This revision is now accepted and ready to land.Jun 30 2021, 5:27 AM
In D30940#696482, @kib wrote:

I wonder if it is better named 'nosetid', both in syscall and there.

I've been thinking about it - "NO_NEW_PRIVS" is a rather silly name - but IMHO given that we're copying Linux semantics, we ought to also copy the name; it will make it less confusing and easier to grep for.

This revision was automatically updated to reflect the committed changes.