HomeFreeBSD

sh: Add -o verify to use O_VERIFY when sourcing scripts

Description

sh: Add -o verify to use O_VERIFY when sourcing scripts

Add -o verify to sh to make it use O_VERIFY when
sourcing scripts and reading profiles.

Useful in conjunction with mac_veriexec to help protect at
least some parts of the boot sequence, e.g., /etc/rc*.

Differential revision: https://reviews.freebsd.org/D30464
Reviewed by: jilles, sjg
Obtained from: Stormshield

Details

Provenance
stephane.rochoy_stormshield.euAuthored on Sep 23 2021, 8:40 AM
wmaCommitted on Sep 23 2021, 8:43 AM
Reviewer
jilles
Differential Revision
D30464: sh: Add -o verify to use O_VERIFY when sourcing scripts
Parents
R10:90f6610b1975: UPDATING: Fix spelling.
Branches
Unknown
Tags
Unknown