Differential D40681

ktrace: Record socket violations with KTR_CAPFAIL
ClosedPublic
Actions

Authored by jfree on Jun 20 2023, 10:09 PM.

Tags

Referenced Files

	F151912467: D40681.id.diff
	Sat, Apr 11, 12:17 PM

	F151846512: D40681.id.diff
	Sat, Apr 11, 1:50 AM

	Unknown Object (File)
	Fri, Apr 10, 2:53 AM

	Unknown Object (File)
	Fri, Apr 10, 12:25 AM

	Unknown Object (File)
	Tue, Apr 7, 2:13 PM

	Unknown Object (File)
	Tue, Apr 7, 7:01 AM

	Unknown Object (File)
	Sun, Apr 5, 9:33 AM

	Unknown Object (File)
	Sat, Apr 4, 3:47 AM

Subscribers

Details

Reviewers

Commits

rGc3ee50b705b8: ktrace: Record socket violations with KTR_CAPFAIL
rGaa32d7cbc92c: ktrace: Record socket violations with KTR_CAPFAIL

Summary

Report restricted access to socket addresses and protocols while
Capsicum violation tracing with CAPFAIL_ADDR and CAPFAIL_PROTO.

Programs that are not yet Capsicumized may be traced to discover
potential capability failures. With `ktrace -t p` and kdump, you
are given a list of syscalls as a starting point for program
Capsicumization.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

jfree created this revision.Jun 20 2023, 10:09 PM

Herald added a subscriber: imp. · View Herald TranscriptJun 20 2023, 10:09 PM

jfree requested review of this revision.Jun 20 2023, 10:09 PM

jfree added a parent revision: D40676: ktrace: Record detailed ECAPMODE violations.Jun 20 2023, 10:21 PM

markj accepted this revision.Sep 28 2023, 4:14 PM

This revision is now accepted and ready to land.Sep 28 2023, 4:14 PM

Closed by commit rGaa32d7cbc92c: ktrace: Record socket violations with KTR_CAPFAIL (authored by jfree). · Explain WhyApr 7 2024, 11:58 PM

This revision was automatically updated to reflect the committed changes.

jfree added a commit: rGaa32d7cbc92c: ktrace: Record socket violations with KTR_CAPFAIL.

Herald added subscribers: olce, glebius. · View Herald TranscriptApr 7 2024, 11:58 PM

jfree added a commit: rGc3ee50b705b8: ktrace: Record socket violations with KTR_CAPFAIL.May 12 2024, 12:09 AM

Revision Contents
Changeset List

Path

Size

sys/

kern/

9 lines

uipc_syscalls.c

13 lines

Diff 136664

sys/kern/uipc_socket.c

Loading...

sys/kern/uipc_syscalls.c

Loading...