From nobody Tue Jun 30 17:19:56 2026 X-Original-To: dev-commits-src-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gqVJY2rkGz6jXqS for ; Tue, 30 Jun 2026 17:19:57 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gqVJY151qz3pVJ for ; Tue, 30 Jun 2026 17:19:57 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782839997; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=6ZfWWUl8SLelh2ZMsGFy3xQCeKFKtofJDHYWpxgnHNM=; b=s8ghtvEXvQ8IVm9yuWWhxsArbg6QtQNA0e2R5POZ3Z0dwSswX1ToUAQfTLUwsgWlCpb2Gs IU7xZKqPPX18G/RLDwV3Srd/WouvR+fW0O4uzuU7n1J5Sz5ceRM7qGOiUU+CnOomZDr70B M3Ox9I1WD4toRALk/Px6AHGi0oqM6V+1ShMBnUzAObstDyTlMqPCpcVpmYVccnnd1R/0zE hWArPH/YqiBbyP2a82REV8OszfKhTNRRsk5XGsZ7krxQxVMesHkUYpg2UGAc6OJ/UMFJCI km+VebEa7aWsijEYEif3LABmGkAzzxvmQKXty6y2u+8lL2g1UVyeF1puBfyGaw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1782839997; a=rsa-sha256; cv=none; b=LIoTABcrtGYwofdGDc5eJcHdfXg+Mv4SB3NGWje0qjoQUvsBz69zutbq2LmowJMcAhgiP6 1u72w3ioC4YVQzhf7NdDc7AwHl7Q2NvJKVnIH4vk6HUODT9QaDa+93uJS/XQxYUFmPmHhO CuX8RfZjnOXMPTdZivy7tXLtFFCDxbA0o6XEhpF91RdBDrtN29gws31wxauiTJjvaKY++b JCqLYtVRLZh8krXTfiQ9jUtoW3tITw612efWkkaR5qNDy2moiUfTm3p1YoxGOz1begCqlG j9hFKgVEpHS6Q6p3xiVnCRMe7r+JAAMaI8Lir3adnUlBHlKNEbrq6Fi7E+OSkw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782839997; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=6ZfWWUl8SLelh2ZMsGFy3xQCeKFKtofJDHYWpxgnHNM=; b=BLfjBArJ+3gwZ1Jj4s59qaTVla9txt8S2VwQHcKwoM9/erulL9zvRIGoAxDx5HfDQca+n+ SsmcMFbDPYKQ+9Z9CfI7jZJTxLYI575iabRgCcdxjkqQMilPnyFhyptKIhw2g1+owV+exG /C0l4qyo4HLGGM0piZ2N4YRaQhXiZgY1LiBqElzhAkig95pGkF8k+dbqzGBvnZv+qLcmPI wOWsz/VpPINtRBf1+CM3liFlPEIdPOl+l0FJ8q8T1ocEkKu7LeCkt7Ji9ZLPSqneFQJlJ1 KgNFv2/x4Dmgwf+lTUVPw/RyeJNddPnuxA0WGLXPgnZGwi8qwA3ZPPRsINFxTw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gqVJX75ndztD9 for ; Tue, 30 Jun 2026 17:19:56 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 45603 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 30 Jun 2026 17:19:56 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Kyle Evans From: Mark Johnston Subject: git: 1763deb84ba9 - stable/14 - kern: fix auditing of ptrace(2) syscall requests List-Id: Commits to the stable branches of the FreeBSD src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-branches@freebsd.org Sender: owner-dev-commits-src-branches@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/stable/14 X-Git-Reftype: branch X-Git-Commit: 1763deb84ba988d36546cbb6222f08a71d1a1bb0 Auto-Submitted: auto-generated Date: Tue, 30 Jun 2026 17:19:56 +0000 Message-Id: <6a43fabc.45603.3190e8f5@gitrepo.freebsd.org> The branch stable/14 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=1763deb84ba988d36546cbb6222f08a71d1a1bb0 commit 1763deb84ba988d36546cbb6222f08a71d1a1bb0 Author: Kyle Evans AuthorDate: 2026-06-25 17:02:47 +0000 Commit: Mark Johnston CommitDate: 2026-06-30 17:00:22 +0000 kern: fix auditing of ptrace(2) syscall requests `error` here is the return value of syscall_thread_enter() rather than the syscall itself, so the committed audit records do not reflect reality. This is less harmful than them recording an error when the operation actually succeeded, but it could still possibly be used to throw off IDS techniques with things like bsmtrace. Approved by: so Security: FreeBSD-SA-26:45.audit Security: CVE-2026-49426 Reviewed by: des, kib, markj, csjp Differential Revision: https://reviews.freebsd.org/D57847 --- sys/kern/kern_sig.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c index 7f399586f639..88c93b98b646 100644 --- a/sys/kern/kern_sig.c +++ b/sys/kern/kern_sig.c @@ -2779,7 +2779,7 @@ ptrace_syscallreq(struct thread *td, struct proc *p, td->td_errno = nerror; if (audited) - AUDIT_SYSCALL_EXIT(error, td); + AUDIT_SYSCALL_EXIT(tsr->ts_ret.sr_error, td); if (!sy_thr_static) syscall_thread_exit(td, se); }