From owner-freebsd-bugs@FreeBSD.ORG  Sun Apr 13 20:43:29 2014
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@smarthost.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 796D64D2;
 Sun, 13 Apr 2014 20:43:29 +0000 (UTC)
Received: from freefall.freebsd.org (freefall.freebsd.org
 [IPv6:2001:1900:2254:206c::16:87])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 6497F13DF;
 Sun, 13 Apr 2014 20:43:29 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
 by freefall.freebsd.org (8.14.8/8.14.8) with ESMTP id s3DKhTN2007734;
 Sun, 13 Apr 2014 20:43:29 GMT
 (envelope-from jilles@freefall.freebsd.org)
Received: (from jilles@localhost)
 by freefall.freebsd.org (8.14.8/8.14.8/Submit) id s3DKhT8H007733;
 Sun, 13 Apr 2014 20:43:29 GMT (envelope-from jilles)
Date: Sun, 13 Apr 2014 20:43:29 GMT
Message-Id: <201404132043.s3DKhT8H007733@freefall.freebsd.org>
To: frf@xocolatl.com, jilles@FreeBSD.org, freebsd-bugs@FreeBSD.org,
 jilles@FreeBSD.org
From: jilles@FreeBSD.org
Subject: Re: kern/127048: systat(1) information leak when
 security.bsd.see_other_uids=0
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-bugs>,
 <mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs/>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
 <mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 13 Apr 2014 20:43:29 -0000

Synopsis: systat(1) information leak when security.bsd.see_other_uids=0

State-Changed-From-To: open->feedback
State-Changed-By: jilles
State-Changed-When: Sun Apr 13 20:41:07 UTC 2014
State-Changed-Why: 
I tested this on stable/9 and head (11.0) and it appears to work properly.

Either this was fixed since 7.0 or there is something special about
your environment.

Make sure that /usr/bin/systat does not have setuid/setgid bits set;
if so, it will read from kernel memory and ignore
security.bsd.see_other_uids.

Can you provide more information?


Responsible-Changed-From-To: freebsd-bugs->jilles
Responsible-Changed-By: jilles
Responsible-Changed-When: Sun Apr 13 20:41:07 UTC 2014
Responsible-Changed-Why: 
Track replies.

http://www.freebsd.org/cgi/query-pr.cgi?pr=127048