From owner-cvs-src@FreeBSD.ORG Sun Feb 13 16:42:09 2005 Return-Path: Delivered-To: cvs-src@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1036016A4CF; Sun, 13 Feb 2005 16:42:09 +0000 (GMT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id E1F0D43D48; Sun, 13 Feb 2005 16:42:08 +0000 (GMT) (envelope-from sobomax@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j1DGg8Aj007698; Sun, 13 Feb 2005 16:42:08 GMT (envelope-from sobomax@repoman.freebsd.org) Received: (from sobomax@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j1DGg8iP007697; Sun, 13 Feb 2005 16:42:08 GMT (envelope-from sobomax) Message-Id: <200502131642.j1DGg8iP007697@repoman.freebsd.org> From: Maxim Sobolev Date: Sun, 13 Feb 2005 16:42:08 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/i386/ibcs2 ibcs2_signal.c src/sys/kern kern_prot.c kern_sig.c src/sys/compat/linux linux_signal.c src/sys/compat/svr4 svr4_signal.c src/sys/sys proc.h syscallsubr.h src/sys/alpha/osf1 osf1_signal.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Feb 2005 16:42:09 -0000 sobomax 2005-02-13 16:42:08 UTC FreeBSD src repository Modified files: sys/i386/ibcs2 ibcs2_signal.c sys/kern kern_prot.c kern_sig.c sys/compat/linux linux_signal.c sys/compat/svr4 svr4_signal.c sys/sys proc.h syscallsubr.h sys/alpha/osf1 osf1_signal.c Log: Split out kill(2) syscall service routine into user-level and kernel part, the former is callable from user space and the latter from the kernel one. Make kernel version take additional argument which tells if the respective call should check for additional restrictions for sending signals to suid/sugid applications or not. Make all emulation layers using non-checked version, since signal numbers in emulation layers can have different meaning that in native mode and such protection can cause misbehaviour. As a result remove LIBTHR from the signals allowed to be delivered to a suid/sugid application. Requested (sorta) by: rwatson MFC after: 2 weeks Revision Changes Path 1.39 +1 -1 src/sys/alpha/osf1/osf1_signal.c 1.49 +1 -1 src/sys/compat/linux/linux_signal.c 1.31 +1 -1 src/sys/compat/svr4/svr4_signal.c 1.34 +1 -1 src/sys/i386/ibcs2/ibcs2_signal.c 1.193 +4 -5 src/sys/kern/kern_prot.c 1.299 +22 -11 src/sys/kern/kern_sig.c 1.417 +4 -2 src/sys/sys/proc.h 1.24 +2 -0 src/sys/sys/syscallsubr.h