diff options
author | rwatson <rwatson@FreeBSD.org> | 2002-03-22 02:28:26 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2002-03-22 02:28:26 +0000 |
commit | d8370f667da0469f2618c75d4827cd30d389f233 (patch) | |
tree | 56b81ee24418a5df5f35b03ef356052ff15731d1 /include/grp.h | |
parent | 0b20191705a346bc322deac818912bd4eab96a1b (diff) | |
download | FreeBSD-src-d8370f667da0469f2618c75d4827cd30d389f233.zip FreeBSD-src-d8370f667da0469f2618c75d4827cd30d389f233.tar.gz |
Break out the "see_other_uids" policy check from the various
method-based inter-process security checks. To do this, introduce
a new cr_seeotheruids(u1, u2) function, which encapsulates the
"see_other_uids" logic. Call out to this policy following the
jail security check for all of {debug,sched,see,signal} inter-process
checks. This more consistently enforces the check, and makes the
check easy to modify. Eventually, it may be that this check should
become a MAC policy, loaded via a module.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
Diffstat (limited to 'include/grp.h')
0 files changed, 0 insertions, 0 deletions