d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update suser(9) and priv(9) to document that the 'flags' argument is now

Browse Source 
unused -- SUSER_RUID and SUSER_ALLOWJAIL are no longer defined or used.

Approved by:	re (bmah)
This commit is contained in:
Robert Watson 2007-06-26 23:12:05 +00:00
parent baa219ed6f
commit 6b25fa2abb
2 changed files with 13 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
share/man/man9/priv.9
View File

@ -57,9 +57,9 @@ policy or access control list.
The caller identifies the desired privilege via the The caller identifies the desired privilege via the
.Fa priv .Fa priv
argument. argument.
Additional access control context may also be passed using the The optional flags argument,
.Fa flags .Fa flags ,
argument. is currently unused.
.Ss Privilege Policies .Ss Privilege Policies
Privileges are typically granted based on one of two base system policies: Privileges are typically granted based on one of two base system policies:
the superuser policy, which grants privilege based on the effective (or the superuser policy, which grants privilege based on the effective (or

40
share/man/man9/suser.9
View File

@ -68,37 +68,17 @@ not the thread's own, when there is no thread, when superuser
powers should be extended to imprisoned roots, or when the credential powers should be extended to imprisoned roots, or when the credential
to be checked is the real user rather than the effective user. to be checked is the real user rather than the effective user.
.Pp .Pp
By default, a process does not command superuser powers if it has Whether or not a privilege is permitted in a
been imprisoned by the .Xr jail 8
.Xr jail 2 depends on logic in
system call. .Fn prison_priv_check .
There are cases however where this is appropriate, and this can
be done by passing
.Dv SUSER_ALLOWJAIL
in the
.Fa flag
argument to the
.Fn suser_cred
function.
It is important to review carefully in each case that
this does not weaken the prison.
Generally, only where the action is protected by
.Xr chroot 2
implicit in the
.Xr jail 2
call should such powers be granted.
.Pp .Pp
By default, the credential checked is the effective user. In general, privileges are assigned based on the effective user ID; in some
There are cases cases, the real user ID may be used.
where it is instead necessary to check the real user (for example, when .Pp
determining if resource limits should be applied), and this can be done The
by passing the .Fa flags
.Dv SUSER_RUID field is currently unused.
flag in the
.Fa flag
argument to the
.Fn suser_cred
function.
.Pp .Pp
The The
.Fn suser .Fn suser