cvs commit: src/sys/kern kern_prot.c

[Robert Watson]

rwatson     2003/09/14 00:22:39 PDT

  FreeBSD src repository

  Modified files:
    sys/kern             kern_prot.c 
  Log:
  Add a new sysctl, security.bsd.conservative_signals, to disable
  special signal-delivery protections for setugid processes.  In the
  event that a system is relying on "unusual" signal delivery to
  processes that change their credentials, this can be used to work
  around application problems.
  
  Also, add SIGALRM to the set of signals permitted to be delivered to
  setugid processes by unprivileged subjects.
  
  Reported by:    Joe Greco <jgreco at ns.sol.net>
  
  Revision  Changes    Path
  1.176     +16 -1     src/sys/kern/kern_prot.c