rwatson 6422aec2e5 o Introduce group subset test, which limits the ability of a process to
debug another process based on their respective {effective,additional,
  saved,real} gid's.  p1 is only permitted to debug p2 if its effective
  gids (egid + additional groups) are a strict superset of the gids of
  p2.  This implements properly the security test previously incorrectly
  implemented in kern_ktrace.c, and is consistent with the kernel
  security policy (although might be slightly confusing for those more
  familiar with the userland policy).
o Restructure p_candebug() logic so that various results are generated
  comparing uids, gids, credential changes, and then composed in a
  single check before testing for privilege.  These tests encapsulate
  the "BSD" inter-process debugging policy.  Other non-BSD checks remain
  seperate.  Additional comments are added.

Submitted by:   tmm, rwatson
Obtained from:  TrustedBSD Project
Reviewed by:    petef, tmm, rwatson
2001-11-02 18:44:50 +00:00
..
2001-01-28 06:39:56 +00:00
2001-09-19 02:53:59 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-10-11 17:53:43 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-08-14 22:13:14 +00:00
2001-09-12 08:38:13 +00:00
2001-01-01 23:09:53 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-06-01 10:07:28 +00:00
2000-09-29 13:36:47 +00:00
2001-09-12 08:38:13 +00:00
2000-04-22 15:13:06 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-10-11 08:15:14 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-06-11 12:39:29 +00:00
2001-06-11 12:39:29 +00:00
2001-09-12 08:38:13 +00:00
2001-10-21 06:26:55 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00
2001-09-12 08:38:13 +00:00