Differential D40678

ktrace: Record syscall violations with KTR_CAPFAIL
ClosedPublic
Actions

Authored by jfree on Jun 20 2023, 10:05 PM.

Tags

Referenced Files

	F155028357: D40678.id136661.diff
	Thu, Apr 30, 7:05 PM

	F155028271: D40678.id123571.diff
	Thu, Apr 30, 7:05 PM

	F155028173: D40678.id.diff
	Thu, Apr 30, 7:04 PM

	Unknown Object (File)
	Tue, Apr 28, 11:49 PM

	Unknown Object (File)
	Mon, Apr 27, 1:10 PM

	Unknown Object (File)
	Mon, Apr 27, 3:00 AM

	Unknown Object (File)
	Sun, Apr 26, 2:32 PM

	Unknown Object (File)
	Tue, Apr 21, 10:06 PM

Subscribers

Details

Reviewers

markj
andrew

Commits

rGfa92eaede40b: ktrace: Record syscall violations with KTR_CAPFAIL
rG05296a0ff615: ktrace: Record syscall violations with KTR_CAPFAIL

Summary

Report syscalls that are not allowed in capability mode with
CAPFAIL_SYSCALL.

Programs that are not yet Capsicumized may be traced to discover
potential capability failures. With `ktrace -t p` and kdump, you
are given a list of syscalls as a starting point for program
Capsicumization.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

jfree created this revision.Jun 20 2023, 10:05 PM

Herald added a reviewer: andrew. · View Herald TranscriptJun 20 2023, 10:05 PM

Herald added a subscriber: imp. · View Herald Transcript

jfree requested review of this revision.Jun 20 2023, 10:05 PM

jfree added a project: capsicum.

jfree added a parent revision: D40676: ktrace: Record detailed ECAPMODE violations.Jun 20 2023, 10:21 PM

markj accepted this revision.Sep 28 2023, 4:24 PM

This revision is now accepted and ready to land.Sep 28 2023, 4:24 PM

Closed by commit rG05296a0ff615: ktrace: Record syscall violations with KTR_CAPFAIL (authored by jfree). · Explain WhyApr 7 2024, 11:58 PM

This revision was automatically updated to reflect the committed changes.

jfree added a commit: rG05296a0ff615: ktrace: Record syscall violations with KTR_CAPFAIL.

Herald added a subscriber: olce. · View Herald TranscriptApr 7 2024, 11:58 PM

jfree added a commit: rGfa92eaede40b: ktrace: Record syscall violations with KTR_CAPFAIL.May 12 2024, 12:08 AM

Revision Contents
Changeset List

Path

Size

sys/

amd64/

amd64/

52 lines

arm/

arm/

27 lines

i386/

i386/

34 lines

kern/

2 lines

12 lines

11 lines

Diff 136661

sys/amd64/amd64/sys_machdep.c

Loading...

sys/arm/arm/sys_machdep.c

Loading...

sys/i386/i386/sys_machdep.c

Loading...

sys/kern/kern_descrip.c

Loading...

sys/kern/kern_sig.c

Loading...

sys/kern/subr_syscall.c

Loading...