From nobody Wed Jul 29 17:48:42 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4h9KZM5RFlz6mZl1 for ; Wed, 29 Jul 2026 17:48:43 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4h9KZM0WGHz3hbl for ; Wed, 29 Jul 2026 17:48:43 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785347323; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=8iex823/YRokDXXmPlO/EzdQL4wXIUNPxavspzqyOO8=; b=gyNBvWSx7hvY+yhQGPZGGfBXvlk7OmBz0E/wuh7a2P/Xx5ubLRdrqvxGIkFeF/iN9l/fZQ bbmKu4bvN/mHK0a8pnEawaum55qlmDSoWFfgsemO2Q9YSrn1lWG6h04pGfQ0KbWifyw0Za LKepw3vRwRI0KMdMlbWbb12K26SGfJnxFPzFD0c4r/W+KFv3dJIwH7SvB4ien3NqcV5XPT gFnb3o+27oY/HxTloinUOtiu/jejzfLo2TmK/0zC9U8+ms9BdfzwGRHqsSCoFfV0v3WOyB gk8u7alyo16zJdAK6u9YlS+GkDFQHRCTCLaupYWkwrDoSp/s8FCmj4jZfNSzeQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785347323; a=rsa-sha256; cv=none; b=UaovFQWzHv3dtqYQJnP0r5IeRhjkRL+eqL21w5SRTNb25+jl+nvpekBqLKJ+x/pq/632f5 RU0w1KIzllIVAAF02tBoIf4KB4gStetQ/WO3SqXZhvHhBPmIuHYpzm9sUxTHrdtLMLkP7a tZ1w1lysz+UjOhcJvlLDAAnEgbxvf8F5hpXKhHY1TEWlXi+rE7kLVowVtJJaYhA3WjU3OO 1TJ3RJPeFMT+4A0PpF7rK1Dh4v78+A4MwkNx9KFjqgzvv68sXhKM9iZGYVDO1s3QpeZv28 kYPqKeF/RBqCWpmDGNzHtvr+sNGvtT7LjLXj/wqTZHhqt6ai0NE2XjsfDTSoJA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785347323; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=8iex823/YRokDXXmPlO/EzdQL4wXIUNPxavspzqyOO8=; b=MIb9xQ6i7mn1oln51wpK2e+YAG6icTEDWTsXHOM3iv55LWg3WgSKdVeeHKI/RqxNg4VO20 qgPxdredtT/BWD5IHaFOZkmEpoiS0l71R8wgID051xdZG5OF8ZLOkorxY5eaJ1gWx5RMRY ed9HVLleFPuWEHZsuIb48havb9EH8DurejoU+C06lWgPmX21fNRKjnzOdYP3AmtJiSHCk4 qxQuxJcVEESSILpQjWDDZs8+4M/P2F8LDTvL2hxNljm4UOv29ZyUmir0Wy0OvFz8n2BhNJ ZaekfcDqHM7eU/lMAucpdg+wlD0ebmNEQlVIzKDV936RoPfaB3SmRcCApjb0BQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4h9KZL6T7Rzcvn for ; Wed, 29 Jul 2026 17:48:42 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3aba6 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 29 Jul 2026 17:48:42 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Alexander Leidinger From: Mark Johnston Subject: git: fb432f55a7b8 - stable/15 - jail: restore ktrace privileges for jailed root List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/stable/15 X-Git-Reftype: branch X-Git-Commit: fb432f55a7b8bfcdc1ec4a24b1c861f15b867da5 Auto-Submitted: auto-generated Date: Wed, 29 Jul 2026 17:48:42 +0000 Message-Id: <6a6a3cfa.3aba6.5dc14d73@gitrepo.freebsd.org> The branch stable/15 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=fb432f55a7b8bfcdc1ec4a24b1c861f15b867da5 commit fb432f55a7b8bfcdc1ec4a24b1c861f15b867da5 Author: Alexander Leidinger AuthorDate: 2026-07-17 21:33:00 +0000 Commit: Mark Johnston CommitDate: 2026-07-29 17:48:13 +0000 jail: restore ktrace privileges for jailed root Commit 4be491e1b9b3 ("jail: Optionally allow audit session state to be configured in a jail") removed the #if 0 around the audit cases in prison_priv_check() and added the PR_ALLOW_SETAUDIT check under them. This unintentionally captured the preceding case PRIV_KTRACE, which used to fall through the disabled block into the unconditional return (0) of the credential cases: since then, jailed root only has ktrace privileges (tracing processes with changed credentials, see ktrcanset()) when the unrelated allow.setaudit knob is enabled, and conversely gains them when that audit knob is turned on. Give PRIV_KTRACE back its own unconditional return (0), matching its comment and the pre-4be491e1b9b3 behaviour. Approved by: so Security: FreeBSD-SA-26:53.ktrace Security: CVE-2026-58086 Fixes: 4be491e1b9b3 ("jail: Optionally allow audit session state to be configured in a jail") Reviewed by: markj Assisted-by: Claude Code (Fable 5) --- sys/kern/kern_jail.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/kern/kern_jail.c b/sys/kern/kern_jail.c index 6b0ae8fbb8ce..ab91b35dae81 100644 --- a/sys/kern/kern_jail.c +++ b/sys/kern/kern_jail.c @@ -4378,6 +4378,7 @@ prison_priv_check(struct ucred *cred, int priv) * Allow ktrace privileges for root in jail. */ case PRIV_KTRACE: + return (0); /* * Allow jailed processes to configure audit identity and