MAC/do: cleanups for the exec_paths objects
AbandonedPublic
Actions

Authored by polyduekes_proton.me on Jul 2 2026, 9:11 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sat, Aug 1, 7:46 AM

	Unknown Object (File)
	Sat, Aug 1, 6:46 AM

	Unknown Object (File)
	Sat, Aug 1, 4:30 AM

	Unknown Object (File)
	Fri, Jul 31, 3:57 AM

	Unknown Object (File)
	Wed, Jul 22, 12:58 AM

	Unknown Object (File)
	Tue, Jul 21, 11:29 PM

	Unknown Object (File)
	Thu, Jul 16, 12:59 AM

	Unknown Object (File)
	Tue, Jul 14, 8:35 PM

View All 20 Files

Subscribers

imp

Details

Reviewers

olce
bapt
markj

Summary

add cleanup code for the exec constraint feature

Depends on D58012

Signed-off-by: polyduekes <polyduekes@proton.me>

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 74490
Build 71373: arc lint + arc unit

Event Timeline

polyduekes_proton.me created this revision.Jul 2 2026, 9:11 PM

Herald added a subscriber: imp. · View Herald TranscriptJul 2 2026, 9:11 PM

polyduekes_proton.me requested review of this revision.Jul 2 2026, 9:11 PM

Harbormaster completed remote builds in B74490: Diff 181234.Jul 2 2026, 9:11 PM

polyduekes_proton.me added a child revision: D58015: MAC/do: clone exec_paths along with the rest of the rules.Jul 2 2026, 9:16 PM

polyduekes_proton.me edited parent revisions, added: D58013: MAC/do: rename exec paths to trusted_bins; removed: D58012: MAC/do: add exec whitelist/blacklist support for mac_do consumers.Jul 2 2026, 9:25 PM

Please integrate this into D58012, having this separate does not make sense, and D58012 does not compile without it.

This revision now requires changes to proceed.Thu, Jul 23, 3:22 AM

the cleanup changes have beend added to D58012 thus this revision is no longer needed

Revision Contents
Changeset List

Path

Size

sys/

security/

mac_do/

mac_do.c

66 lines

Diff 181234

View Options

sys/security/mac_do/mac_do.c

MAC/do: cleanups for the exec_paths objectsAbandonedPublicActions