freebsd-dev/sys
Konstantin Belousov 89f2ab0608 Switch to check for effective user id in r349320, and disable dumping
into existing files for sugid processes.

Despite using real user id pronounces the intent, it actually breaks
suid coredumps, while not making any difference for non-sugid
processes.  The reason for the breakage is that non-existent core file
is created with the effective uid (unless weird hacks like SUIDDIR are
configured).

Then, if user enabled kern.sugid_coredump, core dumping should not
overwrite core files owned by effective uid, but we cannot pretend to
use real uid for dumping.

PR:	68905
admbugs:	358
Sponsored by:	The FreeBSD Foundation
MFC after:	1 week
2019-06-23 21:15:31 +00:00
..
amd64 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
arm Add the rtc8583 driver to conf/files. Also, move sy8106a from 2019-06-23 17:23:56 +00:00
arm64 pmap_enter_quick_locked() never replaces a valid mapping, so it need not 2019-06-23 21:06:56 +00:00
bsm Create new EINTEGRITY error with message "Integrity check failed". 2019-01-17 06:35:45 +00:00
cam Improve AHCI Enclosure Management and SES interoperation. 2019-06-23 19:05:01 +00:00
cddl Minimize aggsum_compare(&arc_size, arc_c) calls. 2019-06-14 20:04:28 +00:00
compat LinuxKPI: Additions to rcu list. 2019-06-21 18:48:07 +00:00
conf Add some i2c slave-device drivers that were missing from NOTES. 2019-06-23 17:39:13 +00:00
contrib Make ipf_objbytes a constant. ipf_objbytes is a table of internal data 2019-06-17 20:10:55 +00:00
crypto aesni(4): Fix trivial type typo 2019-05-27 00:47:51 +00:00
ddb ddb show proc typo 2019-06-22 05:35:23 +00:00
dev Improve AHCI Enclosure Management and SES interoperation. 2019-06-23 19:05:01 +00:00
dts arm64: Add support for NanoPI NEO2 2019-05-02 12:56:13 +00:00
fs fcntl: fix overflow when setting F_READAHEAD 2019-06-20 23:07:20 +00:00
gdb
geom Use sbuf_cat() in GEOM confxml generation. 2019-06-19 15:36:02 +00:00
gnu dts: Import files from Linux 5.1 2019-05-08 19:27:30 +00:00
i386 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
isa
kern Switch to check for effective user id in r349320, and disable dumping 2019-06-23 21:15:31 +00:00
kgssapi Make the warning intervals for deprecated crypto algorithms tunable. 2019-06-11 23:00:55 +00:00
libkern Separate kernel crc32() implementation to its own header (gsb_crc32.h) and 2019-06-17 19:49:08 +00:00
mips sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
modules Add ACPI support for USB driver. 2019-06-17 23:03:30 +00:00
net V_ip6_forwarding and V_ipforwarding have been defined in ip6_var.h / 2019-06-19 08:49:24 +00:00
net80211 Enhance the comment ieee80211_add_channel() to avoid a 2019-06-10 14:31:18 +00:00
netgraph Remove 'dir' argument in ng_ipfw_input, since ip_fw_args now has this info. 2019-03-14 22:30:05 +00:00
netinet Add "tcpmss" opcode to match the TCP MSS value. 2019-06-21 10:54:51 +00:00
netinet6 Sort opt_foo.h #includes and add a missing blank line in ip_output(). 2019-06-11 22:07:39 +00:00
netipsec Make the warning intervals for deprecated crypto algorithms tunable. 2019-06-11 23:00:55 +00:00
netpfil Add "tcpmss" opcode to match the TCP MSS value. 2019-06-21 10:54:51 +00:00
netsmb Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
nfs
nfsclient
nfsserver
nlm
ofed Fix prio vs. nonprio tagged traffic in RDMACM 2019-06-04 06:21:31 +00:00
opencrypto Move declaration of warninterval out from under COMPAT_FREEBSD32. 2019-06-11 23:28:07 +00:00
powerpc sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
riscv sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
rpc Fix malloc stats for the RPCSEC_GSS server code when DEBUG is enabled. 2019-04-04 01:23:06 +00:00
security Extract eventfilter declarations to sys/_eventfilter.h 2019-05-20 00:38:23 +00:00
sparc64 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
sys Reduce namespace pollution from r349233 2019-06-21 21:50:14 +00:00
teken Attempt to complete fixing programmable function keys for syscons. 2019-02-20 02:14:41 +00:00
tests Regularize the Netflix copyright 2019-02-04 21:28:25 +00:00
tools Add SDIO support. 2019-06-08 16:26:56 +00:00
ufs Add FIOBMAP2 ioctl 2019-06-20 14:13:10 +00:00
vm Extend mmap/mprotect API to specify the max page protections. 2019-06-20 18:24:16 +00:00
x86 Currently, MCA entries remain on an every-growing linked list. This means 2019-06-08 18:26:48 +00:00
xdr
xen xen: introduce a new way to setup event channel upcall 2019-01-30 11:34:52 +00:00
Makefile