Make kern.hostname and friends readable in capability mode
ClosedPublic
Actions

Authored by allanjude on Sep 23 2016, 2:36 PM.

Details

Reviewers

emaste
cem
bapt
ed
jonathan
rwatson
oshogbo

Group Reviewers

capsicum

Commits

rS306452: Allow reading the following sysctl MIBs in capability mode:

Summary

This would make D7999 easier

Diff Detail

Repository

rS FreeBSD src repository - subversion

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 5281
Build 5453: CI src build	Jenkins
Build 5452: arc lint + arc unit

Event Timeline

allanjude updated this revision to Diff 20644.Sep 23 2016, 2:36 PM

allanjude retitled this revision from to Make kern.hostname and friends readable in capability mode.

allanjude updated this object.

allanjude edited the test plan for this revision. (Show Details)

allanjude added reviewers: capsicum, cem, emaste, oshogbo, ed, bapt.

Herald added a subscriber: imp. · View Herald TranscriptSep 23 2016, 2:36 PM

Related: D8000 :-)

rwatson's okay with kern.hostname. I don't know what the others are for so I wasn't sure enabling them was okay.

cem mentioned this in D8000: kern_mib: Allow kern.hostname in Capsicum capability sandbox.Sep 26 2016, 5:18 PM

I think that these are all fine to make readable, for the same reason that the hostname is ok: allowing information to "leak" in a way that enables more software to use Capsicum sandboxing is a net win. If we wanted to obscure the host UUID then we should also be hiding anything that could be used to identify the machine, which seems distinctly unhelpful in our overall goal of World Domination (tm).

This revision is now accepted and ready to land.Sep 26 2016, 5:21 PM

jonathan added a reviewer: rwatson.Sep 26 2016, 5:21 PM