From nobody Mon Jun 29 19:26:05 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gpx8Z0TRKz6jjM5 for ; Mon, 29 Jun 2026 19:26:06 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gpx8Y4XKKz40mD for ; Mon, 29 Jun 2026 19:26:05 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782761165; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=d47LOIH1cGirhHi6fFen8aO1PrGeDMW61jtLiuMY4UA=; b=HJj/EMusVSMqqFV3svoKyZZF+oeSu4q06Bgy6Ca9YYfrswl3FvJ0eC9XN6zDhPV9BRr7FF GnI3mSWKiOThhtZRrJSYJ+vLg3aFPTT0YotjUL7ATvAEU2uEmydRmi/kjBRphxcBSyS54Z 5ly81KIzrqPPwuyKqaz46UdA4tKeaicPI9xItXPhTsMyDRF88UPFwIzLkHfGRyP2xptfE2 JhtOWeBdkle0QoTiPFbC9p15LbppN6bmuahG5tRcuo5edGPP4rxU1xosT05eT5UiCpEt1T HROuGVlVRJxVPkndcWu2deJkNvUsx/PqVTaeoYXVO6jcTSmykvXB2xsZZIC4sg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1782761165; a=rsa-sha256; cv=none; b=A+JmRqMVLaflH1aj3Fsv4rXeS8/Y5W+neyWfogsEdsTABPy2uEgCY1ss1krT2UujyKY2+/ GObR9nOmquCUFpnyHfacCsaEwX1fBrhc90BinOUf0zkCToJXB/g9Q8SfLfCzTxKl3ZhAg0 rghPiQYTgYT24ukVe3OeqRD6VDXZFxh5OWm7Se7GlWFtCPv4Ds/+g2UkTu8N8kfzmIUUus VB5ZRWnxajooiqwfK0N6FWE41z3GH2e1KgJK604gOTYfpclmVYlHPs8LU74XRspLYJECkc RPm2Na5GpG2wDSPaVcjVL7JbleKBDxZOC16Ox9bnUdawdotW2YmFToYj0mVp2w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782761165; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=d47LOIH1cGirhHi6fFen8aO1PrGeDMW61jtLiuMY4UA=; b=C0gzmxd19jrg9fodxj7iUPjqQZp7gdVMJlVeKl9rtOFajjfgiIVvjnJDBgclGPfocph0LZ dsF9Xj1p9X6NIMN8wbhlM/IW0kb4N/6QHuhrX05vnGAIEuaM4PU71C0sEvm1AUqb2IozTL 9C/eKjQdLNQF21rpKi3g05804VvWHTUpMxlDKFNtnNMWvaenNkRjj84crUuU3wdnSgQ1FU P9+m77w0EyNDwdOUnAE1HfYt7+b2Wy7ao33qKBMpx9R+w0m9aH7ru9oNzr0deWDGHmQwxM olfXzgGsoEeVGtiywMObMJR7ta8JNSe9c4EhzxwtCgcQfFnVXnAFsLUAvjLuCA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gpx8Y3Jkcz19Nx for ; Mon, 29 Jun 2026 19:26:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 21fc3 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 29 Jun 2026 19:26:05 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Olivier Certner Subject: git: 29c55812380d - stable/15 - MAC/do: Do not skip blanks when parsing executable paths List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: olce X-Git-Repository: src X-Git-Refname: refs/heads/stable/15 X-Git-Reftype: branch X-Git-Commit: 29c55812380daa6acd4b9483ef96b8a17f6fba3e Auto-Submitted: auto-generated Date: Mon, 29 Jun 2026 19:26:05 +0000 Message-Id: <6a42c6cd.21fc3.20919c88@gitrepo.freebsd.org> The branch stable/15 has been updated by olce: URL: https://cgit.FreeBSD.org/src/commit/?id=29c55812380daa6acd4b9483ef96b8a17f6fba3e commit 29c55812380daa6acd4b9483ef96b8a17f6fba3e Author: Olivier Certner AuthorDate: 2026-05-07 15:32:28 +0000 Commit: Olivier Certner CommitDate: 2026-06-29 19:23:56 +0000 MAC/do: Do not skip blanks when parsing executable paths The kind of tolerance we apply to parsing rules, whose format we have defined, cannot be applied to paths since blank characters are allowed there. There is still the limitation that no escape character is currently supported, and so it is not possible to configure a path having a ':' character. Reviewed by: bapt Fixes: 9818224174c4 ("MAC/do: Executable paths feature (GSoC 2025's final state)") MFC after: 1 month Sponsored by: The FreeBSD Foundation Pull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 (cherry picked from commit 1fa1e3f3950fc0593ab73ea075c24c9bfbe8afd6) --- sys/security/mac_do/mac_do.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/security/mac_do/mac_do.c b/sys/security/mac_do/mac_do.c index 9ca6874ce145..8ef2a21396b1 100644 --- a/sys/security/mac_do/mac_do.c +++ b/sys/security/mac_do/mac_do.c @@ -1165,7 +1165,7 @@ parse_exec_paths(const char *const string, struct exec_paths *const exec_paths, MPASS(copy[len] == '\0'); p = copy; - while ((path = strsep_noblanks(&p, ":")) != NULL) { + while ((path = strsep(&p, ":")) != NULL) { size_t path_len; if (*path == '\0')