Page MenuHomeFreeBSD

MAC/do: rename exec paths to trusted_bins
Needs ReviewPublic

Authored by polyduekes_proton.me on Jul 2 2026, 9:07 PM.
Tags
None
Referenced Files
F169134400: D58013.id181233.diff
Mon, Aug 31, 1:18 PM
Unknown Object (File)
Sat, Aug 29, 5:51 PM
Unknown Object (File)
Fri, Aug 28, 9:43 AM
Unknown Object (File)
Wed, Aug 26, 6:41 PM
Unknown Object (File)
Wed, Aug 26, 5:31 PM
Unknown Object (File)
Wed, Aug 26, 12:31 PM
Unknown Object (File)
Fri, Aug 21, 6:55 AM
Unknown Object (File)
Fri, Aug 14, 5:07 AM
Subscribers

Details

Reviewers
olce
bapt
Summary

the current "executable paths" feature limits which binaries can
call setcred(), with the addition of the exec constraint feature
that limits what paths can be exec'ed by an userland supervisor
such as mdo,the rename will make it clear to distinguish between
both.

Depends on D58012

Signed-off-by: polyduekes <polyduekes@proton.me>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 74489
Build 71372: arc lint + arc unit