Author: oshogbo
Date: Fri Aug 17 14:35:10 2018
New Revision: 337965
URL: https://svnweb.freebsd.org/changeset/base/337965

Log:
  capsicum: allow the setproctitle(3) function in capability mode
  
  Capsicum in past allowed to change the process title.
  This was broken with r335939.
  
  PR:           230584
  Submitted by: Yuichiro NAITO <naito.yuich...@gmail.com>
  Reported by:  i...@niw.com.au
  MFC after:    1 week

Modified:
  head/sys/kern/kern_exec.c

Modified: head/sys/kern/kern_exec.c
==============================================================================
--- head/sys/kern/kern_exec.c   Fri Aug 17 13:24:48 2018        (r337964)
+++ head/sys/kern/kern_exec.c   Fri Aug 17 14:35:10 2018        (r337965)
@@ -123,7 +123,7 @@ static int do_execve(struct thread *td, struct image_a
 
 /* XXX This should be vm_size_t. */
 SYSCTL_PROC(_kern, KERN_PS_STRINGS, ps_strings, CTLTYPE_ULONG|CTLFLAG_RD|
-    CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
+    CTLFLAG_CAPRD|CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
 
 /* XXX This should be vm_size_t. */
 SYSCTL_PROC(_kern, KERN_USRSTACK, usrstack, CTLTYPE_ULONG|CTLFLAG_RD|
_______________________________________________
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

Reply via email to