MAC/do: cleanups for the exec_paths objects
AbandonedPublic
Actions

Authored by polyduekes_proton.me on Jul 2 2026, 9:11 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, Sep 21, 5:45 AM

	Unknown Object (File)
	Wed, Sep 16, 1:27 PM

	Unknown Object (File)
	Fri, Sep 11, 5:01 AM

	Unknown Object (File)
	Thu, Sep 10, 6:01 PM

	Unknown Object (File)
	Tue, Sep 8, 2:09 AM

	Unknown Object (File)
	Mon, Sep 7, 2:29 AM

	Unknown Object (File)
	Sat, Sep 5, 2:24 AM

	Unknown Object (File)
	Fri, Sep 4, 11:06 AM

View All 52 Files

Subscribers

imp

Details

Reviewers

olce
bapt
markj

Summary

add cleanup code for the exec constraint feature

Depends on D58012

Signed-off-by: polyduekes <polyduekes@proton.me>

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 74490
Build 71373: arc lint + arc unit

Event Timeline

polyduekes_proton.me created this revision.Jul 2 2026, 9:11 PM

Herald added a subscriber: imp. · View Herald TranscriptJul 2 2026, 9:11 PM

polyduekes_proton.me requested review of this revision.Jul 2 2026, 9:11 PM

Harbormaster completed remote builds in B74490: Diff 181234.Jul 2 2026, 9:11 PM

polyduekes_proton.me added a child revision: D58015: MAC/do: clone exec_paths along with the rest of the rules.Jul 2 2026, 9:16 PM

polyduekes_proton.me edited parent revisions, added: D58013: MAC/do: rename exec paths to trusted_bins; removed: D58012: MAC/do: add exec whitelist/blacklist support for mac_do consumers.Jul 2 2026, 9:25 PM

Please integrate this into D58012, having this separate does not make sense, and D58012 does not compile without it.

This revision now requires changes to proceed.Jul 23 2026, 3:22 AM

the cleanup changes have beend added to D58012 thus this revision is no longer needed

Revision Contents
Changeset List

Path

Size

sys/

security/

mac_do/

mac_do.c

66 lines

Diff 181234

View Options

sys/security/mac_do/mac_do.c

MAC/do: cleanups for the exec_paths objectsAbandonedPublicActions