From nobody Wed Jul 29 17:50:35 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4h9KcX09Y7z6mbGv for ; Wed, 29 Jul 2026 17:50:36 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4h9KcW26QVz3mdF for ; Wed, 29 Jul 2026 17:50:35 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785347435; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=cWsDJU7CPyho2J6EN9lEd3sL8Xl6vgPZE5bHY0CVbNk=; b=x1uyL4DDflmr4SfGeQYSC2vW3dazAE5nrA1YZ7lkk4S1x4Dj53S7TR8Fl/FvyHSnZoHLLM 5gBvepcP2z0DBMbI5yS6r5UewmORVle5heVTLeIDVsNiCaVyq7P9aw9fSDshjgLI4dyDc7 zoZd0AasC+Qa0RKoCsH92KCqi/53afgRsRcu4m+dNRvftG5pwqX3ZGHVRabknmtGrxPUov 2nKsZUplXmseay6ReBWjDX9eHaNIQzz9d2ZCIIv1bbteVfmDHEu+tLXnmPZTuXVxVNRnRp d44BnXlMQxorI+sthHIfFy3UxS+3UC/EzNVSAZCfWVeNTE7gsMtFUu5LcQ1NvA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785347435; a=rsa-sha256; cv=none; b=O19fuz3OsTBqNmT0vRVcrIsC+Fxl7zFwkRXCqvPRyDi+X3b7VaaGqkvtAo9cjwDiqaVGox HfHWd9xYfxuvC3M9gZ5nH4pSs0qObRl82/6JcoQOGPPARO0WPqxRbcfnUKMM90lj8a7ltM buKtPtENurtsxghAP2ARTSTlUXmkQMJjVVHynyvJBbIihwB3C9xuWq20F/GGmv9sDOUaUZ jh7vtlzDPgjFNdUrIkD04mzPcAd/Cbxmom1FLJTsYjCap1TO0qJnNnnifVmTPx4YiPHEne IVAauasgVPT3RGjvLg7JzjUqmSLSCyXkWNOhpmalHQ6oAwz9z/FR3g2TPZexkg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785347435; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=cWsDJU7CPyho2J6EN9lEd3sL8Xl6vgPZE5bHY0CVbNk=; b=sADyxllv9F8xkl3PxajSjFUjaWt3h9rFyC15alof0rcS00970SgeYktSYjSPksge6z74lQ THcruipJ1ScBaV75UxjACHXPLRLiEK40diAqoc58f8HX9rnRILtfNlheEleiCpluQJy/GE LVMf2a2ES5Wt6tNhXGoqz3jDMgpO3bupPzWclgv9OngiDAhBt7JMx5oeEpugR8gJHYqrOf Inu9/rA+xT+YolKwwrzDl6mE0RedWMdBs4OQoH3fbws6fyzr/y9sgBD+rAqNUdLvjQEcir 9NDIn0u4ww6QyqTh0pLzuMi+XbU1qrTPhQaP9j38SZDuf62KT+wns6oAQ1oUEA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4h9KcW1B33zcqn for ; Wed, 29 Jul 2026 17:50:35 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3c0a2 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 29 Jul 2026 17:50:35 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Alexander Leidinger From: Mark Johnston Subject: git: 00effd2ab0bf - releng/15.1 - jail: restore ktrace privileges for jailed root List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/releng/15.1 X-Git-Reftype: branch X-Git-Commit: 00effd2ab0bf59000bfd17f0184d8ea381fa7f23 Auto-Submitted: auto-generated Date: Wed, 29 Jul 2026 17:50:35 +0000 Message-Id: <6a6a3d6b.3c0a2.4c92a9e4@gitrepo.freebsd.org> The branch releng/15.1 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=00effd2ab0bf59000bfd17f0184d8ea381fa7f23 commit 00effd2ab0bf59000bfd17f0184d8ea381fa7f23 Author: Alexander Leidinger AuthorDate: 2026-07-17 21:33:00 +0000 Commit: Mark Johnston CommitDate: 2026-07-28 17:34:40 +0000 jail: restore ktrace privileges for jailed root Commit 4be491e1b9b3 ("jail: Optionally allow audit session state to be configured in a jail") removed the #if 0 around the audit cases in prison_priv_check() and added the PR_ALLOW_SETAUDIT check under them. This unintentionally captured the preceding case PRIV_KTRACE, which used to fall through the disabled block into the unconditional return (0) of the credential cases: since then, jailed root only has ktrace privileges (tracing processes with changed credentials, see ktrcanset()) when the unrelated allow.setaudit knob is enabled, and conversely gains them when that audit knob is turned on. Give PRIV_KTRACE back its own unconditional return (0), matching its comment and the pre-4be491e1b9b3 behaviour. Approved by: so Security: FreeBSD-SA-26:53.ktrace Security: CVE-2026-58086 Fixes: 4be491e1b9b3 ("jail: Optionally allow audit session state to be configured in a jail") Reviewed by: markj Assisted-by: Claude Code (Fable 5) --- sys/kern/kern_jail.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/kern/kern_jail.c b/sys/kern/kern_jail.c index 43acde461e40..dd420f868af9 100644 --- a/sys/kern/kern_jail.c +++ b/sys/kern/kern_jail.c @@ -4313,6 +4313,7 @@ prison_priv_check(struct ucred *cred, int priv) * Allow ktrace privileges for root in jail. */ case PRIV_KTRACE: + return (0); /* * Allow jailed processes to configure audit identity and