bsd.security.see_other_uids affecting netstat?

pluknet pluknet at gmail.com
Thu Dec 3 11:14:56 UTC 2009


2009/12/3 Marc Silver <marcs at draenor.org>:
> Hi guys,
>
> Please forgive if this is a bit of a noob question
>
> I noticed that when the bsd.security.see_other_uids sysctl is set to 0, the
> netstat command gives no output for users (non-root).

No, it gives no access to sockets (switched to per-inpcb since 7) not
owned by that user.
See mac_seeotheruids(4):
DESCRIPTION
     The mac_seeotheruids policy module, when enabled, denies users to see
     processes or sockets owned by other users.

-- 
wbr,
pluknet


More information about the freebsd-security mailing list