d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Block all write operations to /proc/1/* when securelevel > 0.

Browse Source 
The additional check in procfs_ctl.c could be backed out, but
I'm leaving it in for good measure.

Reviewed by:	Theo de Raadt <deraadt@OpenBSD.org>
This commit is contained in:
alex 1997-06-21 16:09:49 +00:00
parent db73f6494a
commit 793295a94d
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/fs/procfs/procfs_subr.c
View File

@ -36,7 +36,7 @@
*
* @(#)procfs_subr.c 8.6 (Berkeley) 5/14/95
*
* $Id: procfs_subr.c,v 1.13 1997/02/22 09:40:30 peter Exp $
* $Id: procfs_subr.c,v 1.14 1997/03/08 16:06:34 bde Exp $
*/
#include <sys/param.h>
@ -242,6 +242,8 @@ procfs_rw(ap)
p = PFIND(pfs->pfs_pid);
if (p == 0)
return (EINVAL);
if (p->p_pid == 1 && securelevel > 0 && uio->uio_rw == UIO_WRITE)
return(EACCES);
while (pfs->pfs_lockowner) {
tsleep(&pfs->pfs_lockowner, PRIBIO, "pfslck", 0);

4
sys/miscfs/procfs/procfs_subr.c
View File

@ -36,7 +36,7 @@
*
* @(#)procfs_subr.c 8.6 (Berkeley) 5/14/95
*
* $Id: procfs_subr.c,v 1.13 1997/02/22 09:40:30 peter Exp $
* $Id: procfs_subr.c,v 1.14 1997/03/08 16:06:34 bde Exp $
*/
#include <sys/param.h>
@ -242,6 +242,8 @@ procfs_rw(ap)
p = PFIND(pfs->pfs_pid);
if (p == 0)
return (EINVAL);
if (p->p_pid == 1 && securelevel > 0 && uio->uio_rw == UIO_WRITE)
return(EACCES);
while (pfs->pfs_lockowner) {
tsleep(&pfs->pfs_lockowner, PRIBIO, "pfslck", 0);