opnsense-src/sys/security
Simon J. Gerraty 4a5fa10861 procfs require PRIV_PROC_MEM_WRITE to write mem
Add a priv_check for PRIV_PROC_MEM_WRITE which will be blocked
by mac_veriexec if being enforced, unless the process has a maclabel
to grant priv.

Reviewed by:	stevek
Sponsored by:	Juniper Networks, Inc.
Differential Revision:	https://reviews.freebsd.org/D46692
2024-09-19 13:10:27 -07:00
..
audit sys: Automated cleanup of cdefs and other formatting 2023-11-26 22:24:00 -07:00
mac sys: Automated cleanup of cdefs and other formatting 2023-11-26 22:24:00 -07:00
mac_biba cr_canseejailproc(): New privilege, no direct check for UID 0 2023-09-28 11:42:22 -03:00
mac_bsdextended sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ddb mac_ddb: Fix the show rman validator. 2022-08-12 10:20:05 -07:00
mac_do MAC/do: allow to call setuid if real user id is 0 2024-05-23 12:09:11 +02:00
mac_grantbylabel procfs require PRIV_PROC_MEM_WRITE to write mem 2024-09-19 13:10:27 -07:00
mac_ifoff sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ipacl mac_ipacl: Use IfAPI 2023-08-25 12:50:39 -04:00
mac_lomac cr_canseejailproc(): New privilege, no direct check for UID 0 2023-09-28 11:42:22 -03:00
mac_mls sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_none sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ntpd sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_partition sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_pimd sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_portacl sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_priority Thread creation privilege for realtime group 2021-12-15 00:01:58 +02:00
mac_seeotheruids sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_stub sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_test sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_veriexec procfs require PRIV_PROC_MEM_WRITE to write mem 2024-09-19 13:10:27 -07:00
mac_veriexec_parser sys: Automated cleanup of cdefs and other formatting 2023-11-26 22:24:00 -07:00