Edward Tomasz Napierala db8d680ebe procctl(2): add PROC_NO_NEW_PRIVS_CTL, PROC_NO_NEW_PRIVS_STATUS ... This introduces a new, per-process flag, "NO_NEW_PRIVS", which is inherited, preserved on exec, and cannot be cleared. The flag, when set, makes subsequent execs ignore any SUID and SGID bits, instead executing those binaries as if they not set. The main purpose of the flag is implementation of Linux PROC_SET_NO_NEW_PRIVS prctl(2), and possibly also unpriviledged chroot. Reviewed By: kib Sponsored By: EPSRC Differential Revision: https://reviews.freebsd.org/D30939		2021-07-01 09:42:07 +01:00
..
__error.c
__vdso_gettimeofday.c	vdso: lower precision of vdso implementation of CLOCK_MONOTONIC_FAST and CLOCK_UPTIME_FAST	2021-06-24 00:36:33 +03:00
_exit.2
_umtx_op.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
abort2.2
accept.2
accept.c
accept4.c
access.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
acct.2
adjtime.2	Remove references to timed(8)	2021-05-13 09:53:08 +02:00
aio_cancel.2
aio_error.2	Add aio_writev and aio_readv	2021-01-02 19:57:58 -07:00
aio_fsync.2	aio_fsync(2): Support O_DSYNC.	2021-01-08 13:15:56 +13:00
aio_mlock.2
aio_read.2	Add aio_writev and aio_readv	2021-01-02 19:57:58 -07:00
aio_return.2	lio_listio: validate aio_lio_opcode	2021-01-11 19:53:01 -07:00
aio_suspend.2	aio_suspend.2: properly canonicalize .Dd	2020-12-11 00:28:28 +00:00
aio_suspend.c
aio_waitcomplete.2
aio_write.2	Add aio_writev and aio_readv	2021-01-02 19:57:58 -07:00
bind.2
bindat.2
brk.2
brk.c
cap_enter.2	cap_enter(2): fix CAVEATS section	2020-12-11 00:26:49 +00:00
cap_fcntls_limit.2
cap_ioctls_limit.2
cap_rights_limit.2
chdir.2
chflags.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
chmod.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
chown.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
chroot.2	Updates to chroot(2) docs	2020-09-29 18:13:54 +00:00
clock_gettime.2	Remove references to timed(8)	2021-05-13 09:53:08 +02:00
clock_gettime.c
clock_nanosleep.c
close.2
close.c
closefrom.2
closefrom.c
compat-ino64.h
compat-stub.c
connect.2
connect.c
connectat.2	connectat(2): clarify that the s argument is socket	2021-04-30 17:43:45 +03:00
copy_file_range.2	copy_file_range(2): add recommendation to use large "len"	2021-01-02 17:21:21 -08:00
cpuset.2	Add code examples to cpuset(2), and improve cross referencing.	2021-04-25 15:22:00 +01:00
cpuset_getaffinity.2	cpuset{,_getaffinity,_getdomain}.2: fix SEE ALSO	2020-12-11 01:52:27 +00:00
cpuset_getdomain.2	cpuset{,_getaffinity,_getdomain}.2: fix SEE ALSO	2020-12-11 01:52:27 +00:00
dup.2
eventfd.2	eventfd.2: Add the mail address of the submitter into copyright.	2020-12-28 21:03:16 +02:00
execve.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
extattr_get_file.2	extattr_get_file(20: bump .Dd	2020-12-08 04:18:16 +00:00
fcntl.2	open(2): Add O_DSYNC flag.	2021-01-08 13:15:56 +13:00
fcntl.c
fdatasync.c
ffclock.2
fhlink.2	fhlink(2): the syscalls do not take flag	2021-03-02 20:16:55 +02:00
fhopen.2
fhreadlink.2
flock.2
fork.2	fork.2: Fix a typo in an example	2021-04-20 10:24:21 +02:00
fork.c
fstat.c
fstatat.c
fstatfs.c
fsync.2
fsync.c
getdents.c
getdirentries.2	getdirentries.2: remove unnecessary space	2021-04-11 11:17:01 +02:00
getdirentries.c
getdtablesize.2
getfh.2	open(2): Remove O_BENEATH and AT_BENEATH	2021-03-02 20:16:55 +02:00
getfsstat.2
getfsstat.c
getgid.2
getgroups.2
getitimer.2	Fix a few mandoc issues	2020-10-09 19:12:44 +00:00
getlogin.2	getlogin_r: fix the type of len	2020-09-09 18:07:13 +00:00
getloginclass.2	Drop "All rights reserved" from all my stuff. This includes	2020-10-28 13:46:11 +00:00
getpeername.2
getpgrp.2
getpid.2
getpriority.2
getrandom.2
getrlimit.2
getrusage.2
getsid.2
getsockname.2
getsockopt.2	Revert "SO_RERROR indicates that receive buffer overflows should be handled as errors."	2021-02-08 22:32:32 +00:00
gettimeofday.2	Remove references to timed(8)	2021-05-13 09:53:08 +02:00
gettimeofday.c
getuid.2
interposing_table.c	libthr: wrap pdfork(2), same as fork(2).	2021-01-11 22:59:52 +02:00
intro.2
ioctl.2
issetugid.2
jail.2	jail: Change both root and working directories in jail_attach(2)	2021-02-19 14:13:35 -08:00
kenv.2
kevent.c
kill.2
kldfind.2
kldfirstmod.2
kldload.2
kldnext.2
kldstat.2
kldsym.2
kldunload.2
kqueue.2	kevent: Prohibit negative change and event list lengths	2021-05-27 15:52:20 -04:00
ktrace.2
link.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
lio_listio.2	lio_listio(2): fix manlint error	2020-12-08 03:48:05 +00:00
listen.2
lseek.2
lstat.c
madvise.2
Makefile.inc	mq_unlink(3): Add manual page	2021-02-18 18:56:52 +01:00
mincore.2
minherit.2
mkdir.2
mkfifo.2
mknod.2
mknod.c
mlock.2
mlockall.2
mmap.2	mmap(2): Update .Dd missed in the last commit	2020-12-24 14:14:56 +00:00
modfind.2
modnext.2
modstat.2
mount.2
mprotect.2
mq_close.2
mq_getattr.2
mq_notify.2
mq_open.2	mq_open(2): Fix xref to mq_unlink(2)	2021-03-04 13:32:42 +01:00
mq_receive.2
mq_send.2
mq_setattr.2
mq_unlink.2	mq_unlink(3): Add manual page	2021-02-18 18:56:52 +01:00
msgctl.2
msgget.2
msgrcv.2
msgsnd.2
msync.2
msync.c
munmap.2
nanosleep.2
nanosleep.c
nfssvc.2
ntp_adjtime.2
open.2	openat(2): add O_EMPTY_PATH	2021-05-11 02:39:24 +03:00
open.c
openat.c
pathconf.2
pdfork.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
pdfork.c	libthr: wrap pdfork(2), same as fork(2).	2021-01-11 22:59:52 +02:00
pipe.2
pipe.c
poll.2	poll(2): Add POLLRDHUP.	2021-04-28 23:00:31 +12:00
poll.c
posix_fadvise.2
posix_fallocate.2
posix_openpt.2
ppoll.c
procctl.2	procctl(2): add PROC_NO_NEW_PRIVS_CTL, PROC_NO_NEW_PRIVS_STATUS	2021-07-01 09:42:07 +01:00
profil.2
pselect.2
pselect.c
ptrace.2	ptrace: add an option to not kill debuggees on debugger exit	2021-05-25 18:22:34 +03:00
ptrace.c
quotactl.2
rctl_add_rule.2
read.2
read.c
readlink.2
readv.c
reboot.2
recv.2
recvfrom.c
recvmsg.c
rename.2
revoke.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
rfork.2
rmdir.2
rtprio.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
sched_get_priority_max.2
sched_setparam.2
sched_setscheduler.2
sched_yield.2
sctp_generic_recvmsg.2
sctp_generic_sendmsg.2
sctp_peeloff.2
select.2
select.c
semctl.2
semget.2
semop.2
send.2
sendfile.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
sendmsg.c
sendto.c
setcontext.c
setfib.2
setgroups.2
setpgid.2
setregid.2
setresuid.2
setreuid.2
setsid.2
setuid.2
shm_open.2	shm_open(2): Cross-reference posixshmcontrol(1)	2021-06-25 18:12:05 +02:00
shm_open.c	Fix error checking in shm_create_largepage().	2020-09-18 12:30:15 +00:00
shmat.2
shmctl.2
shmget.2
shutdown.2
sigaction.2
sigaction.c
sigaltstack.2
sigfastblock.2
sigpending.2
sigprocmask.2
sigprocmask.c
sigqueue.2
sigreturn.2
sigstack.2
sigsuspend.2
sigsuspend.c
sigtimedwait.c
sigwait.2
sigwait.c
sigwaitinfo.2
sigwaitinfo.c
socket.2
socketpair.2
stat.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
stat.c
statfs.2
statfs.c
swapcontext.c
swapon.2
Symbol.map	libthr: wrap pdfork(2), same as fork(2).	2021-01-11 22:59:52 +02:00
symlink.2
sync.2
sysarch.2
syscall.2
thr_exit.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
thr_kill.2
thr_new.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
thr_self.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
thr_set_name.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
thr_suspend.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
thr_wake.2	libc: Fix most issues reported by mandoc	2020-12-19 14:54:28 +00:00
timer_create.2
timer_delete.2
timer_settime.2
trivial-vdso_tc.c
truncate.2
umask.2
undelete.2
unlink.2	open(2): Remove O_BENEATH and AT_BENEATH	2021-03-02 20:16:55 +02:00
utimensat.2	Add AT_EMPTY_PATH for several *at(2) syscalls	2021-04-15 12:48:11 +03:00
utimes.2
utrace.2
uuidgen.2
vadvise.c
vfork.2
wait.2
wait4.c
wait6.c
write.2	pwrite(2): add a BUGS section	2021-02-20 08:05:43 +00:00
write.c
writev.c