security.bsd.see_jail_proc: Enable restrictions by default (0)
Needs ReviewPublic
Actions

Authored by olce on Jul 20 2023, 3:40 PM.

Tags

None

Referenced Files

	F166018015: D41114.id124919.diff
	Tue, Aug 11, 2:15 AM

	Unknown Object (File)
	Sat, Aug 8, 10:40 AM

	Unknown Object (File)
	Wed, Aug 5, 7:56 AM

	Unknown Object (File)
	Tue, Aug 4, 9:36 AM

	Unknown Object (File)
	Mon, Aug 3, 12:10 AM

	Unknown Object (File)
	Jul 11 2026, 7:35 PM

	Unknown Object (File)
	Jul 5 2026, 7:46 PM

	Unknown Object (File)
	Jul 5 2026, 5:28 PM

View All Files

Subscribers

imp

Details

Reviewers

mhorne
emaste

Summary

So, by default, unprivileged users cannot see subjects or objects belonging to
any other jail, including sub-jails of the jails they are in.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 52749
Build 49640: arc lint + arc unit

Event Timeline

olce created this revision.Jul 20 2023, 3:40 PM

Herald added a subscriber: imp. · View Herald TranscriptJul 20 2023, 3:40 PM

olce requested review of this revision.Jul 20 2023, 3:40 PM

Harbormaster completed remote builds in B52749: Diff 124919.Jul 20 2023, 3:41 PM

olce added a parent revision: D41113: sysctl(8): Mention more security.bsd knobs; Refer to security(7).Jul 20 2023, 3:44 PM

Revision Contents
Changeset List

Path

Size

sys/

kern/

kern_prot.c

2 lines

Diff 124919

View Options

security.bsd.see_jail_proc: Enable restrictions by default (0)Needs ReviewPublicActions