From nobody Wed Jul 29 17:50:09 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4h9Kc22R6Lz6mZjr for ; Wed, 29 Jul 2026 17:50:10 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4h9Kc16QwHz3lpp for ; Wed, 29 Jul 2026 17:50:09 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785347409; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=dpdP8aaGQScp6sgYArAcFjeRC7xAQAH6dmOEnJPlTH0=; b=ujZ4MUXBqv389VBSFUrruiKorGMsWAphLE857kShJsGZPcxTT3HRNbB2aZNxZpxMpLvidl /8BtFuawCNFu1jeMhrZdoFNYjt23Ilwb5sAwxWVzwXgVuMAUYYlYHrLoRpOjPBbwpAZjgA zPDY3wCGyWe+fiXAs4rf8zWHQGie/PGIPXI98vReNCu84iMosH/Qdw5CdqPlii62nanHxT Y2HqzRkIBuO/V2WtoTdY+TRrbzvjDc5egAM07tMhHIB7487Oi2jTI+g7DVoDG8EkhgCCA3 1NnFq3Bht1QoWJSsuoqpJ3Kj+dgqUaeJLoedAtOkgu+0nRjTLJ0fDC0YpyjU9Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785347409; a=rsa-sha256; cv=none; b=espu2POJM/yx755+tuumgt7pZ2loI2s4YSsfz6MMRQpX8/mVvNyvUBsbB1YbvHgGX5bc8K VKAybfLaQNLGBqasvkVd9quvXcfn84kQaozw0ap+yXMo9emp5v7iZdAQBRJWyU2zIY1nLS 5cyoBHyxV8/4ogdxaJ0WBa/Ozmc1/DtqmlGdYBRDzvozeOb+cvGXh/JSLE6ZFX8SxewbXC IC3Ry3645+nQ4RtRW8GLN2B/2SggScsbHhlRCDCbu0UGqcSKsPVp3+xl9COhvZZQHu2aPJ NeXYUkXQl/5NSCZa9iAkpTWsvEmnd64oGXFmOWjdYcMO3eKeBG73/WqLhDvwKg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785347409; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=dpdP8aaGQScp6sgYArAcFjeRC7xAQAH6dmOEnJPlTH0=; b=JRJtWgz4dlmgd+g/wsyOt8PrfAeAhamkuAwEzjhJgeDjGBB8rLa41t8AnwEsbgfyb05zqF TNIZcqHd6Y52gMLeT81C0yv64xm0sZE0MDcOwGyXSpFp2cSeY5VpklV1tOzSG/EJ0du61A IHJNOgi3m2dHSab6yHcMoEjisVz3s1+fBHgl6Pfg5FgdNYNUZHZYaTiUf/pDg7VQPhlGd6 CFI0jSNhml7asTdqllUxiyGo97WQSylvLaMHQC98jVJbIXebxB3kKFKKiruyFsuMh0Ymyg gse7hHW8wVt+SCbAlFhgR1yJajHkspLmfzoF92Mm/GsAoujygoFYOIcb9SSuNw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4h9Kc15HSqzcsw for ; Wed, 29 Jul 2026 17:50:09 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3afb5 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 29 Jul 2026 17:50:09 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Alexander Leidinger From: Mark Johnston Subject: git: 8250729075f1 - releng/15.0 - jail: restore ktrace privileges for jailed root List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/releng/15.0 X-Git-Reftype: branch X-Git-Commit: 8250729075f13de2d47a5e799cc5996abf31fea5 Auto-Submitted: auto-generated Date: Wed, 29 Jul 2026 17:50:09 +0000 Message-Id: <6a6a3d51.3afb5.64a0b734@gitrepo.freebsd.org> The branch releng/15.0 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=8250729075f13de2d47a5e799cc5996abf31fea5 commit 8250729075f13de2d47a5e799cc5996abf31fea5 Author: Alexander Leidinger AuthorDate: 2026-07-17 21:33:00 +0000 Commit: Mark Johnston CommitDate: 2026-07-28 17:34:59 +0000 jail: restore ktrace privileges for jailed root Commit 4be491e1b9b3 ("jail: Optionally allow audit session state to be configured in a jail") removed the #if 0 around the audit cases in prison_priv_check() and added the PR_ALLOW_SETAUDIT check under them. This unintentionally captured the preceding case PRIV_KTRACE, which used to fall through the disabled block into the unconditional return (0) of the credential cases: since then, jailed root only has ktrace privileges (tracing processes with changed credentials, see ktrcanset()) when the unrelated allow.setaudit knob is enabled, and conversely gains them when that audit knob is turned on. Give PRIV_KTRACE back its own unconditional return (0), matching its comment and the pre-4be491e1b9b3 behaviour. Approved by: so Security: FreeBSD-SA-26:53.ktrace Security: CVE-2026-58086 Fixes: 4be491e1b9b3 ("jail: Optionally allow audit session state to be configured in a jail") Reviewed by: markj Assisted-by: Claude Code (Fable 5) --- sys/kern/kern_jail.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/kern/kern_jail.c b/sys/kern/kern_jail.c index 40b2d7a69e3e..c4228febf5fb 100644 --- a/sys/kern/kern_jail.c +++ b/sys/kern/kern_jail.c @@ -4300,6 +4300,7 @@ prison_priv_check(struct ucred *cred, int priv) * Allow ktrace privileges for root in jail. */ case PRIV_KTRACE: + return (0); /* * Allow jailed processes to configure audit identity and