summaryrefslogtreecommitdiffstats
path: root/sys/fs
diff options
context:
space:
mode:
authoralex <alex@FreeBSD.org>1997-04-27 19:02:37 +0000
committeralex <alex@FreeBSD.org>1997-04-27 19:02:37 +0000
commitced78602fea5284de7f4cb1673405ad3f3ad57ce (patch)
treef4104c901887914ce8863cf8d48a859c89e1b6db /sys/fs
parent5dcc803654149aef81fb1d8194a751fb9d264703 (diff)
downloadFreeBSD-src-ced78602fea5284de7f4cb1673405ad3f3ad57ce.zip
FreeBSD-src-ced78602fea5284de7f4cb1673405ad3f3ad57ce.tar.gz
Prevent debugger attachment to init when securelevel > 0.
Noticed by: Brian Buchanan <brian@wasteland.calbbs.com>
Diffstat (limited to 'sys/fs')
-rw-r--r--sys/fs/procfs/procfs_ctl.c7
1 files changed, 6 insertions, 1 deletions
diff --git a/sys/fs/procfs/procfs_ctl.c b/sys/fs/procfs/procfs_ctl.c
index 4370e0c..9f47539 100644
--- a/sys/fs/procfs/procfs_ctl.c
+++ b/sys/fs/procfs/procfs_ctl.c
@@ -37,7 +37,7 @@
* @(#)procfs_ctl.c 8.4 (Berkeley) 6/15/94
*
* From:
- * $Id: procfs_ctl.c,v 1.13 1997/02/22 09:40:27 peter Exp $
+ * $Id: procfs_ctl.c,v 1.14 1997/03/24 11:24:40 bde Exp $
*/
#include <sys/param.h>
@@ -52,6 +52,7 @@
#include <sys/signal.h>
#include <sys/signalvar.h>
#include <sys/ptrace.h>
+#include <sys/systm.h>
#include <miscfs/procfs/procfs.h>
#include <vm/vm.h>
@@ -130,6 +131,10 @@ procfs_control(curp, p, op)
if (p->p_pid == curp->p_pid)
return (EINVAL);
+ /* can't trace init when securelevel > 0 */
+ if (securelevel > 0 && p->p_pid == 1)
+ return (EPERM);
+
/*
* Go ahead and set the trace flag.
* Save the old parent (it's reset in
OpenPOWER on IntegriCloud