opnsense-src/sys/security/mac_grantbylabel
Simon J. Gerraty 4a5fa10861 procfs require PRIV_PROC_MEM_WRITE to write mem
Add a priv_check for PRIV_PROC_MEM_WRITE which will be blocked
by mac_veriexec if being enforced, unless the process has a maclabel
to grant priv.

Reviewed by:	stevek
Sponsored by:	Juniper Networks, Inc.
Differential Revision:	https://reviews.freebsd.org/D46692
2024-09-19 13:10:27 -07:00
..
mac_grantbylabel.c
mac_grantbylabel.h