From nobody Tue Jun 30 17:21:05 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gqVKs4xpxz6jYKC for ; Tue, 30 Jun 2026 17:21:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gqVKs2j69z3rMJ for ; Tue, 30 Jun 2026 17:21:05 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782840065; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=ciXXa/QL2KQVS8/TEemW5x6B7MQ2eF39vOzVT86ihg4=; b=vlwufaOuArUrQdxJUdBJnOyB+zftxKwz/INR2Bq7PBXdwxJaLjgvZUYtnF6/lZPLMBeuJO +1bl44gUKx0Z0R4bchmZUT0yDKi3s1MwXsF9O42camh/94NcE2sSkN837nmXwEaU2atKAE nNefPwan9Tzr4+NXC/CLowI1O5upJslAkz2vu6wQWuhv7SygAhoC75qnTHx9sXoHxq6V5v 5pCEpKzDKxKv/VEeqZQugoV+NJTsd+8Ab96TZ2AClhFfuUaTKu7uhXxBFIvHVF/Xdplcn0 J8V7gi0E3UFe3sBQb9zduBqiMJsXehNVtL1xSXUVtGcKOE7DOt0zkka7kLPdgg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1782840065; a=rsa-sha256; cv=none; b=GSDWcMXUOFq+reu31skBjByF08Q9wM1sXGtj4us9BdUzjsozgIOd20Is8YvjmZSwmehYhZ 9jOshXlJmx8I/sU0SgbmgdwWYduBdhComjuneIF+wsdnKu0Cbg415456JEcdJacXtaFJxa 4l4GJ5RRdQxXOGbpskd2soFIcJUQUPv1WUQYEN9EijrUWDLFlaybENsk514ZlQx2Fh9csN 8jifC0L+z0f/ezIKj/hYCCmfuslUU5aCETwJJ8nzKQhsf/+uJKT2XIa1KU4hxg9uvENgxd q3QBraxoh4s2ryYEfcHqf6cnnHhVZDIOilTQ5HxKpbWQlq7ZnvMpJ3DPHADfPg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782840065; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=ciXXa/QL2KQVS8/TEemW5x6B7MQ2eF39vOzVT86ihg4=; b=pmJEiteOYeBTRvfBUyHGhYne3VXqYxds8+g8trGllZqcnF3ZpOHti0S33mtaeTaBRfPI8j RP8qLbBRbJ7FexEOM807jqkxSyOyjWnyHniIEbcZy6J5Sb1HHCYs24rxHVN0qYhLMkUKkn uMMJD/RLsxQ5nSUGztXMu5INnfOrgi4U4D3Hazny3FesTr3nPQ/h+aLMbBtc+SlB+gHI4Q WU5XP4C0iwyGWlbuxncDnOW2NysliIs0m+MIW2gVBMQMhRhXC9bhQ6VKvQ7ZSPci+XYglZ J3gQGuibtYBbTf7RlP83Qz8YLQJS5cnQs52eQHki2a1jvvDuUx7EonDwT8UeYg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gqVKs1klMztSF for ; Tue, 30 Jun 2026 17:21:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 45b96 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 30 Jun 2026 17:21:05 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Kyle Evans From: Mark Johnston Subject: git: d68c2e77d70c - releng/14.4 - kern: fix auditing of ptrace(2) syscall requests List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/releng/14.4 X-Git-Reftype: branch X-Git-Commit: d68c2e77d70c81d51c27120baffcfe3ebbd4c849 Auto-Submitted: auto-generated Date: Tue, 30 Jun 2026 17:21:05 +0000 Message-Id: <6a43fb01.45b96.1937bc5f@gitrepo.freebsd.org> The branch releng/14.4 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=d68c2e77d70c81d51c27120baffcfe3ebbd4c849 commit d68c2e77d70c81d51c27120baffcfe3ebbd4c849 Author: Kyle Evans AuthorDate: 2026-06-25 17:02:47 +0000 Commit: Mark Johnston CommitDate: 2026-06-29 19:17:30 +0000 kern: fix auditing of ptrace(2) syscall requests `error` here is the return value of syscall_thread_enter() rather than the syscall itself, so the committed audit records do not reflect reality. This is less harmful than them recording an error when the operation actually succeeded, but it could still possibly be used to throw off IDS techniques with things like bsmtrace. Approved by: so Security: FreeBSD-SA-26:45.audit Security: CVE-2026-49426 Reviewed by: des, kib, markj, csjp Differential Revision: https://reviews.freebsd.org/D57847 --- sys/kern/kern_sig.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c index 7f399586f639..88c93b98b646 100644 --- a/sys/kern/kern_sig.c +++ b/sys/kern/kern_sig.c @@ -2779,7 +2779,7 @@ ptrace_syscallreq(struct thread *td, struct proc *p, td->td_errno = nerror; if (audited) - AUDIT_SYSCALL_EXIT(error, td); + AUDIT_SYSCALL_EXIT(tsr->ts_ret.sr_error, td); if (!sy_thr_static) syscall_thread_exit(td, se); }