Page MenuHomeFreeBSD

MAC/do: Apply a rule on real UID/GID instead of effective ones
ClosedPublic

Authored by olce on Nov 29 2024, 8:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Oct 13, 9:12 PM
Unknown Object (File)
Fri, Oct 10, 3:46 PM
Unknown Object (File)
Thu, Oct 9, 10:48 AM
Unknown Object (File)
Sep 12 2025, 5:17 AM
Unknown Object (File)
Sep 6 2025, 5:48 PM
Unknown Object (File)
Sep 5 2025, 5:32 PM
Unknown Object (File)
Sep 1 2025, 11:10 AM
Unknown Object (File)
Aug 27 2025, 7:01 PM
Subscribers

Details

Summary

We intend MAC/do to authorize transitions based on the "real" identity
information of the calling process, rather than transiently-acquired
effective IDs.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable