MAC/do: cleanups for the exec_paths objects
AbandonedPublic
Actions

Authored by polyduekes_proton.me on Jul 2 2026, 9:11 PM.

Tags

None

Referenced Files

	F168267550: D58014.diff
	Thu, Aug 27, 7:06 AM

	Unknown Object (File)
	Tue, Aug 25, 8:06 AM

	Unknown Object (File)
	Tue, Aug 25, 7:31 AM

	Unknown Object (File)
	Tue, Aug 25, 6:59 AM

	Unknown Object (File)
	Fri, Aug 21, 2:35 PM

	Unknown Object (File)
	Thu, Aug 20, 11:21 AM

	Unknown Object (File)
	Fri, Aug 14, 5:31 PM

	Unknown Object (File)
	Thu, Aug 13, 1:17 AM

View All 32 Files

Subscribers

imp

Details

Reviewers

olce
bapt
markj

Summary

add cleanup code for the exec constraint feature

Depends on D58012

Signed-off-by: polyduekes <polyduekes@proton.me>

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 74490
Build 71373: arc lint + arc unit

Event Timeline

polyduekes_proton.me created this revision.Jul 2 2026, 9:11 PM

Herald added a subscriber: imp. · View Herald TranscriptJul 2 2026, 9:11 PM

polyduekes_proton.me requested review of this revision.Jul 2 2026, 9:11 PM

Harbormaster completed remote builds in B74490: Diff 181234.Jul 2 2026, 9:11 PM

polyduekes_proton.me added a child revision: D58015: MAC/do: clone exec_paths along with the rest of the rules.Jul 2 2026, 9:16 PM

polyduekes_proton.me edited parent revisions, added: D58013: MAC/do: rename exec paths to trusted_bins; removed: D58012: MAC/do: add exec whitelist/blacklist support for mac_do consumers.Jul 2 2026, 9:25 PM

Please integrate this into D58012, having this separate does not make sense, and D58012 does not compile without it.

This revision now requires changes to proceed.Jul 23 2026, 3:22 AM

the cleanup changes have beend added to D58012 thus this revision is no longer needed

Revision Contents
Changeset List

Path

Size

sys/

security/

mac_do/

mac_do.c

66 lines

Diff 181234

View Options

sys/security/mac_do/mac_do.c

MAC/do: cleanups for the exec_paths objectsAbandonedPublicActions