Page MenuHomeFreeBSD

MAC/do: Apply a rule on real UID/GID instead of effective ones
AcceptedPublic

Authored by olce on Fri, Nov 29, 8:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Dec 7, 7:34 PM
Unknown Object (File)
Wed, Dec 4, 8:45 AM
Unknown Object (File)
Wed, Dec 4, 6:34 AM
Subscribers

Details

Reviewers
emaste
bapt
Summary

We intend MAC/do to authorize transitions based on the "real" identity
information of the calling process, rather than transiently-acquired
effective IDs.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 60884
Build 57768: arc lint + arc unit