Page MenuHomeFreeBSD
Differential D47845

MAC/do: Apply a rule on real UID/GID instead of effective ones
ClosedPublic
Actions

Authored by olce on Nov 29 2024, 8:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Dec 27, 9:20 AM
Unknown Object (File)
Thu, Dec 26, 1:48 PM
Unknown Object (File)
Thu, Dec 26, 9:58 AM
Unknown Object (File)
Wed, Dec 18, 4:05 AM
Unknown Object (File)
Sun, Dec 15, 8:15 PM
Unknown Object (File)
Tue, Dec 10, 2:34 AM
Unknown Object (File)
Sat, Dec 7, 7:34 PM
Unknown Object (File)
Wed, Dec 4, 8:45 AM
View All 9 Files
Subscribers
imp
jlduran

Details

Reviewers
emaste
bapt
Commits
rGde701f9bdbe0: MAC/do: Apply a rule on real UID/GID instead of effective ones
Summary

We intend MAC/do to authorize transitions based on the "real" identity
information of the calling process, rather than transiently-acquired
effective IDs.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
sys/
security/
mac_do/
4 lines

Diff 148076

View Options

sys/security/mac_do/mac_do.c

Loading...