Page MenuHomeFreeBSD
Differential D7965

Deliver SIGTRAP when ENOTCAPABLE error is returned from a syscall for the process in capability mode.
ClosedPublic
Actions

Authored by kib on Sep 20 2016, 9:36 AM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, May 10, 11:12 AM
Unknown Object (File)
Fri, Apr 26, 11:46 AM
Unknown Object (File)
Fri, Apr 26, 11:10 AM
Unknown Object (File)
Apr 26 2024, 1:33 AM
Unknown Object (File)
Apr 25 2024, 6:19 PM
Unknown Object (File)
Apr 25 2024, 5:58 AM
Unknown Object (File)
Apr 25 2024, 3:38 AM
Unknown Object (File)
Mar 8 2024, 3:10 AM
View All 64 Files
Subscribers
imp

Details

Reviewers
kib
emaste
bapt
oshogbo
Commits
rS306081: Add PROC_TRAPCAP procctl(2) controls and global sysctl kern.trap_enocap.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 5234
Build 5383: CI src buildJenkins

Event Timeline

kib updated this revision to Diff 20523.Sep 20 2016, 9:36 AM
kib retitled this revision from to Deliver SIGTRAP when ENOTCAPABLE error is returned from a syscall for the process in capability mode..
kib updated this object.
kib edited the test plan for this revision. (Show Details)
kib added reviewers: emaste, bapt, oshogbo.
kib set the repository for this revision to rS FreeBSD src repository - subversion.
Herald added a subscriber: imp. · View Herald TranscriptSep 20 2016, 9:36 AM
oshogbo accepted this revision.Sep 20 2016, 9:39 AM
oshogbo edited edge metadata.

That's very cool idea.

This revision is now accepted and ready to land.Sep 20 2016, 9:39 AM
kib added a comment.Sep 20 2016, 9:45 AM
In D7965#164786, @oshogbo wrote:

That's very cool idea.

By emaste'.

emaste accepted this revision.Sep 20 2016, 1:57 PM
emaste edited edge metadata.

Possible enhancements include being able to set this on a per-process basis, and allowing other than SIGTRAP, but this solves my immediate use case.

kib updated this revision to Diff 20542.Sep 20 2016, 4:02 PM
kib edited edge metadata.

Add procctl(2) knob to enable trapping behavior only for subtree.
Treat ECAPMODE same as ENOTCAPABLE.

This revision now requires review to proceed.Sep 20 2016, 4:02 PM
emaste added inline comments.Sep 20 2016, 5:20 PM
sys/kern/subr_syscall.c
182

ksi.ksi_errno = error1;?

kib accepted this revision.Sep 20 2016, 5:25 PM
kib added a reviewer: kib.
kib marked an inline comment as done.
This revision is now accepted and ready to land.Sep 20 2016, 5:25 PM
kib updated this revision to Diff 20547.Sep 20 2016, 5:27 PM
kib edited edge metadata.

Report actual error in siginfo, it is not neccessary ENOTCAPABLE now.

This revision now requires review to proceed.Sep 20 2016, 5:27 PM
emaste accepted this revision.Sep 20 2016, 5:32 PM
emaste edited edge metadata.
This revision is now accepted and ready to land.Sep 20 2016, 5:32 PM
Closed by commit rS306081: Add PROC_TRAPCAP procctl(2) controls and global sysctl kern.trap_enocap. (authored by kib). · Explain WhySep 21 2016, 8:23 AM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
sys/
kern/
10 lines
4 lines
sys/
2 lines
1 line

Diff 20523

View Options

sys/kern/subr_syscall.c

Loading...
View Options

sys/kern/sys_capability.c

Loading...
View Options

sys/sys/capsicum.h

Loading...
View Options

sys/sys/signal.h

Loading...