Page MenuHomeFreeBSD

MAC/do: rename exec paths to trusted_bins
Needs ReviewPublic

Authored by polyduekes_proton.me on Jul 2 2026, 9:07 PM.
Tags
None
Referenced Files
F169792192: D58013.id.diff
Wed, Sep 2, 2:16 PM
F169729174: D58013.id.diff
Wed, Sep 2, 9:50 AM
Unknown Object (File)
Tue, Sep 1, 4:12 PM
Unknown Object (File)
Tue, Sep 1, 2:35 PM
Unknown Object (File)
Tue, Sep 1, 2:32 PM
Unknown Object (File)
Tue, Sep 1, 1:01 PM
Unknown Object (File)
Mon, Aug 31, 1:18 PM
Unknown Object (File)
Sat, Aug 29, 5:51 PM
Subscribers

Details

Reviewers
olce
bapt
Summary

the current "executable paths" feature limits which binaries can
call setcred(), with the addition of the exec constraint feature
that limits what paths can be exec'ed by an userland supervisor
such as mdo,the rename will make it clear to distinguish between
both.

Depends on D58012

Signed-off-by: polyduekes <polyduekes@proton.me>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 74489
Build 71372: arc lint + arc unit