freebsd-dev/sys/security
Florian Walpen e28767f0e1 Thread creation privilege for realtime group
With the mac_priority(4) realtime policy active, users and processes in
the realtime group may promote existing threads and processes to
realtime scheduling priority. Extend the privileges granted to
PRIV_SCHED_SETPOLICY which allows explicit creation of new realtime
threads.

One use case of this is when the pthread scheduling policy is set to
SCHED_RR or SCHED_FIFO via pthread_attr_setschedpolicy(...) before
calling pthread_create(...). I ran into this when testing audio software
with realtime threads, particularly audio/ardour6.

MFC after:	1 week
Differential revision:	https://reviews.freebsd.org/D33393
2021-12-15 00:01:58 +02:00
..
audit vfs: remove the unused thread argument from NDINIT* 2021-11-25 22:50:42 +00:00
mac vfs: remove the unused thread argument from NDINIT* 2021-11-25 22:50:42 +00:00
mac_biba Add PRIV_SCHED_IDPRIO 2021-12-10 04:54:48 +02:00
mac_bsdextended
mac_ifoff
mac_lomac Add PRIV_SCHED_IDPRIO 2021-12-10 04:54:48 +02:00
mac_mls
mac_none
mac_ntpd
mac_partition
mac_portacl
mac_priority Thread creation privilege for realtime group 2021-12-15 00:01:58 +02:00
mac_seeotheruids
mac_stub
mac_test
mac_veriexec vfs: remove the unused thread argument from NDINIT* 2021-11-25 22:50:42 +00:00
mac_veriexec_parser