GID instead of effective ones
ClosedPublic
Actions

Authored by olce on Nov 29 2024, 8:37 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Tue, Mar 4, 7:02 AM

	Unknown Object (File)
	Sat, Feb 8, 5:39 AM

	Unknown Object (File)
	Jan 31 2025, 7:26 AM

	Unknown Object (File)
	Jan 14 2025, 5:35 AM

	Unknown Object (File)
	Jan 6 2025, 9:06 AM

	Unknown Object (File)
	Jan 5 2025, 8:57 AM

	Unknown Object (File)
	Dec 27 2024, 9:20 AM

	Unknown Object (File)
	Dec 26 2024, 1:48 PM

View All 15 Files

Subscribers

imp

jlduran

Details

Reviewers

emaste
bapt

Commits

rGde701f9bdbe0: MAC/do: Apply a rule on real UID/GID instead of effective ones

Summary

We intend MAC/do to authorize transitions based on the "real" identity
information of the calling process, rather than transiently-acquired
effective IDs.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

olce created this revision.Nov 29 2024, 8:37 PM

Herald added a subscriber: imp. · View Herald TranscriptNov 29 2024, 8:37 PM

olce requested review of this revision.Nov 29 2024, 8:37 PM

Harbormaster completed remote builds in B60884: Diff 147176.Nov 29 2024, 8:37 PM

olce added a parent revision: D47624: MAC/do: Convert internal TAILQs to STAILQs.Nov 29 2024, 8:37 PM

olce added reviewers: emaste, bapt.

olce added a subscriber: jlduran.

bapt accepted this revision.Dec 2 2024, 8:58 AM

This revision is now accepted and ready to land.Dec 2 2024, 8:58 AM

Closed by commit rGde701f9bdbe0: MAC/do: Apply a rule on real UID/GID instead of effective ones (authored by olce). · Explain WhyDec 16 2024, 2:47 PM

This revision was automatically updated to reflect the committed changes.

olce added a commit: rGde701f9bdbe0: MAC/do: Apply a rule on real UID/GID instead of effective ones.

Revision Contents
Changeset List

Path

Size

sys/

security/

mac_do/

mac_do.c

4 lines

Diff 148076

View Options

sys/security/mac_do/mac_do.c

MAC/do: Apply a rule on real UID/GID instead of effective onesClosedPublicActions