From nobody Tue Jun 30 17:20:38 2026 X-Original-To: dev-commits-src-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gqVKN2lJ5z6jYDM for ; Tue, 30 Jun 2026 17:20:40 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gqVKM04chz3qfY for ; Tue, 30 Jun 2026 17:20:39 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782840039; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=mCOkVAfHRSduh33P4XaNamdNff4zc/f6QE/q/eThZWE=; b=HLNCQw49oCGn6xnQZTTVM1Mv6yMKrBSBcPMaF7WjtnzFs0jFlnqz4T/5NeFs2gyF/7R9OW aWJZhZr+B/XPL4wQEMHGeRzdaRfsYK7ShDI7m167pBrkN3rF7kIz4DZmCIfamjIUeOmhHD BlFRSIOVVTMapC+OStwBkRvhOpk8t7wTuqrRTMvSY1BOrxyR55cXWZGXQR6D6hG0gtZOSH 5OGTAHgUk8o2en+GB3/ZdnA5Q2IuUYLEjqp/MzXdnGSjas4I3cC1RK1xkk+hqJsOGQbF98 4jFZPbZbRSgNDHPu5GbWjKikRzwjkMuXNAEXbBaNSoohcnk70dt0NX7KnAcvEw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1782840039; a=rsa-sha256; cv=none; b=LN4fXR0I2+gS7GpCo4Vt/nShCNaxCMNoShCuECApR2mc3ywAsT5SwBVGNrvwrE2xddDRuy dDtZU1cVK0pnN70Z6VTGsQaVxXzyxmiXX1n0D8WE14iv7YB9iBv7QLK4x5A6kd1g52l8Sx aaNdOYCtl6nv8cyyghcyX0UsA+PbMGn+1A5dIRiiBuasonkPYDqzMdH0S6BUmsGUW1kEak yLTadwGA8W1+tSpkF2k41Ipmj24S4UYgj0qvPsEwVZ0SnnQfD7k1MYTBk/tBgXXHecfz2i jNmVZcVfxFstS9bhWdrV7OhMU2BC6a4Aq8BemSuGlsv8E20bCv2FnIUueDwqiw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782840039; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=mCOkVAfHRSduh33P4XaNamdNff4zc/f6QE/q/eThZWE=; b=YmIPnI7PKHefL0yh9JEev5C9iwKJ++2X+UttVmVubsd8YZ/9Go+vYpZneBMGDNHtt/EMcI Pdw09Ca570c6l3HkV9pci5Lpyeq2jFnRbswhMfa9Y/MJyp3Y5NjRd/A23C5DD9jvNlUGZk lhCxaRSWm6RUj4FfiguMjaDvyRnspWJp4ZmrfpwTpJvdqlPCX+Jly8YYS+CPGJaXDFgiNh H75VIgNutbs5ZCYI0k485iDeqpGLHbZiAMfvM5a8sddEQTgQNIj0Zg6OeUpZUtSoXEKRJv QU5hqdyKQD1TaX0D5EAhBXOXz79ydTzcxuDW8OGA6+a3nhzkcWuntHbOFGywKA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gqVKL602TztRp for ; Tue, 30 Jun 2026 17:20:38 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 45c37 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 30 Jun 2026 17:20:38 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Kyle Evans From: Mark Johnston Subject: git: 8b11e7df3a62 - releng/14.3 - kern: fix auditing of ptrace(2) syscall requests List-Id: Commits to the stable branches of the FreeBSD src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-branches@freebsd.org Sender: owner-dev-commits-src-branches@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/releng/14.3 X-Git-Reftype: branch X-Git-Commit: 8b11e7df3a62de6469d6d265d3e68b59763d82f4 Auto-Submitted: auto-generated Date: Tue, 30 Jun 2026 17:20:38 +0000 Message-Id: <6a43fae6.45c37.50d915a@gitrepo.freebsd.org> The branch releng/14.3 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=8b11e7df3a62de6469d6d265d3e68b59763d82f4 commit 8b11e7df3a62de6469d6d265d3e68b59763d82f4 Author: Kyle Evans AuthorDate: 2026-06-25 17:02:47 +0000 Commit: Mark Johnston CommitDate: 2026-06-30 02:32:02 +0000 kern: fix auditing of ptrace(2) syscall requests `error` here is the return value of syscall_thread_enter() rather than the syscall itself, so the committed audit records do not reflect reality. This is less harmful than them recording an error when the operation actually succeeded, but it could still possibly be used to throw off IDS techniques with things like bsmtrace. Approved by: so Security: FreeBSD-SA-26:45.audit Security: CVE-2026-49426 Reviewed by: des, kib, markj, csjp Differential Revision: https://reviews.freebsd.org/D57847 --- sys/kern/kern_sig.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c index eda533d73522..41bedf2c1972 100644 --- a/sys/kern/kern_sig.c +++ b/sys/kern/kern_sig.c @@ -2764,7 +2764,7 @@ ptrace_syscallreq(struct thread *td, struct proc *p, td->td_errno = nerror; if (audited) - AUDIT_SYSCALL_EXIT(error, td); + AUDIT_SYSCALL_EXIT(tsr->ts_ret.sr_error, td); if (!sy_thr_static) syscall_thread_exit(td, se); }