Page MenuHomeFreeBSD

proccontrol(1): implement 'nonewprivs'
ClosedPublic

Authored by trasz on Jun 29 2021, 4:43 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Mar 16, 8:49 AM
Unknown Object (File)
Mon, Mar 11, 2:05 AM
Unknown Object (File)
Feb 12 2024, 11:59 AM
Unknown Object (File)
Feb 9 2024, 9:19 AM
Unknown Object (File)
Jan 10 2024, 11:03 PM
Unknown Object (File)
Dec 28 2023, 5:39 AM
Unknown Object (File)
Dec 20 2023, 4:22 AM
Unknown Object (File)
Dec 19 2023, 12:04 PM
Subscribers

Details

Summary

This adds the 'nonewprivs' mode, corresponding to newly added
procctl(2) commands PROC_NO_NEW_PRIVS_CTL and PROC_NO_NEW_PRIVS_STATUS.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 40167
Build 37056: arc lint + arc unit

Event Timeline

trasz requested review of this revision.Jun 29 2021, 4:43 PM

I wonder if it is better named 'nosetid', both in syscall and there.

This revision is now accepted and ready to land.Jun 30 2021, 5:27 AM
In D30940#696482, @kib wrote:

I wonder if it is better named 'nosetid', both in syscall and there.

I've been thinking about it - "NO_NEW_PRIVS" is a rather silly name - but IMHO given that we're copying Linux semantics, we ought to also copy the name; it will make it less confusing and easier to grep for.

This revision was automatically updated to reflect the committed changes.