d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SECURITY: Drop `setgid kmem' bit as early as possible.

Browse Source
This commit is contained in:
Ruslan Ermilov 2001-08-31 16:26:37 +00:00
parent 208691fcd8
commit 3b7e5ccc6a
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=82664
6 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sbin/ccdconfig/ccdconfig.c
View File

@ -511,6 +511,8 @@ dump_ccd(argc, argv)
warnx("can't open kvm: %s", errbuf);
return (1);
}
setegid(getgid());
setgid(getgid());
if (kvm_nlist(kd, nl))
KVM_ABORT(kd, "ccd-related symbols not available");

1
usr.bin/fstat/fstat.c
View File

@ -236,6 +236,7 @@ main(argc, argv)
if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL)
errx(1, "%s", buf);
setgid(getgid());
#ifdef notdef
if (kvm_nlist(kd, nl) != 0)
errx(1, "no namelist: %s", kvm_geterr(kd));

1
usr.bin/netstat/main.c
View File

@ -664,6 +664,7 @@ kread(u_long addr, char *buf, int size)
* XXX.
*/
kvmd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf);
setgid(getgid());
if (kvmd != NULL) {
if (kvm_nlist(kvmd, nl) < 0) {
if(nlistf)

1
usr.bin/vmstat/vmstat.c
View File

@ -241,6 +241,7 @@ main(argc, argv)
kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, errbuf);
if (kd == 0)
errx(1, "kvm_openfiles: %s", errbuf);
setgid(getgid());
if ((c = kvm_nlist(kd, namelist)) != 0) {
if (c > 0) {

1
usr.sbin/pstat/pstat.c
View File

@ -291,6 +291,7 @@ main(argc, argv)
if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == 0)
errx(1, "kvm_openfiles: %s", buf);
(void)setgid(getgid());
if ((ret = kvm_nlist(kd, nl)) != 0) {
if (ret == -1)
errx(1, "kvm_nlist: %s", kvm_geterr(kd));

1
usr.sbin/trpt/trpt.c
View File

@ -164,6 +164,7 @@ main(argc, argv)
errx(1, "%s: no namelist", system);
if ((memf = open(core, O_RDONLY)) < 0)
err(2, "%s", core);
setgid(getgid());
if (kflag)
errx(1, "can't do core files yet");
(void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);