From nobody Sun Jun 21 11:48:16 2026 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gjqN05m7xz6jZk4 for ; Sun, 21 Jun 2026 11:48:16 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gjqN02qL3z3WBr for ; Sun, 21 Jun 2026 11:48:16 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782042496; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=oBx3b49lpFZGRmgqr0M2vfkiObp1tpPzfMwsXewy5a4=; b=kKAbMtMLGTUxcJx0ZBo0+d6u65Re7DQhOoseH0sTqFOF4x9iq7gNzwJO5vSnqw3XPxNZUd zLOvagzibYRIUaOn9GXp+oxcl0FAQeH/VbAcqv0LU6lV0M0ayk0OmUz+ITRkjim89WdIIO qutmvupVvqleAn0LY/p+veoRLU734U27hWT4GCAUmDyyQhUpCsNnz9JTOnbH4A3Vn1Dqz5 1/r3sLt3IvlRS3FvSNnPm7xL7l32qQIlcuG+iebZqt6UH/yOpokxWUaW4klfXAHwm7vDtf pE3ePjvtqgFemlwrpig2P+2p72Ncd1lwfQvAXLeRSiwXR587DViAIsCybQt7Dw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1782042496; a=rsa-sha256; cv=none; b=YI3Oda3WeyeSuh3rdMoVsGAl9qkaW4afSlvGM5mHQnCJXW2e+ZCA7l86M29okQKaibEeGK S/4qEcD2QWMnZJ8udPBWLhemj3gd+G1/5cIccS8Js3nvO8LgM8BoAIwQU2J9Ruf5dLVsno JoeykSqq7FchhXQeNhBOHEJipNhbkAIKNKu6rqa3M+Kl32M0oT8IIq078D3vl2BsOe9Hj8 0b2j4/SxSq3D76yzgMLFSdS+WvSysEIy5xhjTbN96VgDoxia6sVM9sXA8eQfqONo6MX7V/ VVUROcCQxzQRAR2dNb/EPgKn4cDGJBB2lv2ZStSP8O1qBwR195C9uC10OeVZhg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782042496; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=oBx3b49lpFZGRmgqr0M2vfkiObp1tpPzfMwsXewy5a4=; b=r1n/U2U9NxYx1ChvM1YW0t0ue/mHtiFf7Wf+zwW+HKDwo4aDooItBw3UoMfEuRjaWE9r+P 2HkJWttqzht7zgK2wkunHwd1FnQ37U5cd/B3aGBlnVLIzCtR28XWa0ECBq1MU/1MnV+m/o kD2XK0xoYomD9foIusQdk7yw+tNoOT86og+0/clDiULjg502wV6mJptiqR6Uhkk84NNzab mfqLmpPF/Xkc9tcDnREcECIpnsOxYfiKk7GHg7R5YRZ0eiNjX5IXR1Kh6GuHLADNoYyaDA e4cckHpQi8FTUJiA7XjuZHNOgtK8Elej4FekAx8RKLB87NHHaueqdICwwvIp4A== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gjqN01rzqz1DV7 for ; Sun, 21 Jun 2026 11:48:16 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 250bd by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sun, 21 Jun 2026 11:48:16 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Konstantin Belousov Subject: git: d0384f50dad2 - main - sys_set*id(9): wait for the execblocks to pass List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kib X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: d0384f50dad25d3358d76f7556969ea1d515ba68 Auto-Submitted: auto-generated Date: Sun, 21 Jun 2026 11:48:16 +0000 Message-Id: <6a37cf80.250bd.6c385fb@gitrepo.freebsd.org> The branch main has been updated by kib: URL: https://cgit.FreeBSD.org/src/commit/?id=d0384f50dad25d3358d76f7556969ea1d515ba68 commit d0384f50dad25d3358d76f7556969ea1d515ba68 Author: Konstantin Belousov AuthorDate: 2026-06-17 19:07:22 +0000 Commit: Konstantin Belousov CommitDate: 2026-06-21 11:46:54 +0000 sys_set*id(9): wait for the execblocks to pass to ensure stability of the process uid/gids during the p_cansee()/p_candebug()-protected regions. Tested by: pho Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D57497 --- sys/kern/kern_prot.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/sys/kern/kern_prot.c b/sys/kern/kern_prot.c index 47744f6b07fe..a223a7720844 100644 --- a/sys/kern/kern_prot.c +++ b/sys/kern/kern_prot.c @@ -54,6 +54,7 @@ #include #include #include +#include #include #include #include @@ -1021,6 +1022,8 @@ sys_seteuid(struct thread *td, struct seteuid_args *uap) newcred = crget(); euip = uifind(euid); PROC_LOCK(p); + execve_block_pass(td); + /* * Copy credentials so other references do not see our changes. */ @@ -1075,6 +1078,7 @@ sys_setgid(struct thread *td, struct setgid_args *uap) AUDIT_ARG_GID(gid); newcred = crget(); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC @@ -1173,6 +1177,7 @@ sys_setegid(struct thread *td, struct setegid_args *uap) AUDIT_ARG_EGID(egid); newcred = crget(); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC @@ -1304,6 +1309,7 @@ kern_setgroups(struct thread *td, int *ngrpp, gid_t *groups) newcred = crget(); crextend(newcred, ngrp); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC @@ -1360,6 +1366,7 @@ sys_setreuid(struct thread *td, struct setreuid_args *uap) euip = uifind(euid); ruip = uifind(ruid); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC @@ -1439,6 +1446,7 @@ sys_setregid(struct thread *td, struct setregid_args *uap) AUDIT_ARG_RGID(rgid); newcred = crget(); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC @@ -1509,6 +1517,7 @@ sys_setresuid(struct thread *td, struct setresuid_args *uap) euip = uifind(euid); ruip = uifind(ruid); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC @@ -1600,6 +1609,7 @@ sys_setresgid(struct thread *td, struct setresgid_args *uap) AUDIT_ARG_SGID(sgid); newcred = crget(); PROC_LOCK(p); + execve_block_pass(td); oldcred = crcopysafe(p, newcred); #ifdef MAC