Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Jun 2026 19:26:05 +0000
From:      Olivier Certner <olce@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org
Subject:   git: 29c55812380d - stable/15 - MAC/do: Do not skip blanks when parsing executable paths
Message-ID:  <6a42c6cd.21fc3.20919c88@gitrepo.freebsd.org>

index | next in thread | raw e-mail

The branch stable/15 has been updated by olce:

URL: https://cgit.FreeBSD.org/src/commit/?id=29c55812380daa6acd4b9483ef96b8a17f6fba3e

commit 29c55812380daa6acd4b9483ef96b8a17f6fba3e
Author:     Olivier Certner <olce@FreeBSD.org>
AuthorDate: 2026-05-07 15:32:28 +0000
Commit:     Olivier Certner <olce@FreeBSD.org>
CommitDate: 2026-06-29 19:23:56 +0000

    MAC/do: Do not skip blanks when parsing executable paths
    
    The kind of tolerance we apply to parsing rules, whose format we have
    defined, cannot be applied to paths since blank characters are allowed
    there.
    
    There is still the limitation that no escape character is currently
    supported, and so it is not possible to configure a path having a ':'
    character.
    
    Reviewed by:    bapt
    Fixes:          9818224174c4 ("MAC/do: Executable paths feature (GSoC 2025's final state)")
    MFC after:      1 month
    Sponsored by:   The FreeBSD Foundation
    Pull Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/38
    
    (cherry picked from commit 1fa1e3f3950fc0593ab73ea075c24c9bfbe8afd6)
---
 sys/security/mac_do/mac_do.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/security/mac_do/mac_do.c b/sys/security/mac_do/mac_do.c
index 9ca6874ce145..8ef2a21396b1 100644
--- a/sys/security/mac_do/mac_do.c
+++ b/sys/security/mac_do/mac_do.c
@@ -1165,7 +1165,7 @@ parse_exec_paths(const char *const string, struct exec_paths *const exec_paths,
 	MPASS(copy[len] == '\0');
 
 	p = copy;
-	while ((path = strsep_noblanks(&p, ":")) != NULL) {
+	while ((path = strsep(&p, ":")) != NULL) {
 		size_t path_len;
 
 		if (*path == '\0')


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6a42c6cd.21fc3.20919c88>