Date: Thu, 12 Apr 2001 12:39:00 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_prot.c Message-ID: <200104121939.f3CJd0b37475@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2001/04/12 12:39:00 PDT
Modified files:
sys/kern kern_prot.c
Log:
o Reduce information leakage into jails by adding invocations of
p_can(...P_CAN_SEE...) to getpgid(), getsid(), and setpgid(),
blocking these operations on processes that should not be visible
by the requesting process. Required to reduce information leakage
in MAC environments.
Obtained from: TrustedBSD Project
Revision Changes Path
1.81 +10 -1 src/sys/kern/kern_prot.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104121939.f3CJd0b37475>