HomeFreeBSD

Ignore SIGSYS when BSM is compiled in. Otherwise, attempt to invoke su on
rS163641Unpublished

Unpublished Commit ยท Learn More

No further details are available.

Description

Ignore SIGSYS when BSM is compiled in. Otherwise, attempt to invoke su on
system that don't have audit framefork compiled into kernel or ia32 binary
on amd64 system will result in SIGSYS. There is one place in su.c itself
where it tries to check for errno != ENOSYS, but it has been a nop since su
does not catch SIGSYS anyway. There are few other places in libbsm,
where attempt to invoke audit syscal would result in SIGSYS if no audit
support is present in the kernel, so that the only reliable method for
now is to disable SIGSYS completely in the case when BSM is compiled in.

In the long run, both direct invocation of audit-related syscalls and
libbsm should be made more intellegent to handle the case when BSM is not
compiled into the kernel gracefully.

MFC after: 3 days

(provided re@ approval)

Details

Provenance
sobomaxAuthored on
Parents
rS163640: Don't leak files.
Branches
Unknown
Tags
Unknown

Event Timeline