From nobody Tue Jun 30 17:22:04 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gqVM13CJMz6jZ3f for ; Tue, 30 Jun 2026 17:22:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gqVM1113Wz3swP for ; Tue, 30 Jun 2026 17:22:05 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782840125; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=BkHe1wv0k/7cM7OjXy7cpcBL6M1epJ5rOwRZJTi47YA=; b=EosXaZMYVXgQogQetMJ2qcaFCHYBiSZkoxGPDU+2m8fXXnvVKrsnuA1p7LOYyUxMFsyWzV xGgQWBRnNISWbeBSNvyZr3shpr3KEpIPUFxIwEyik2MInWHnNh+NB8WPELTxI55SH/p1Zt ZQtnzf8uahAVpp/7d0mTVrV7+4Gi8LV8XhnOGXomnPkcQVmuXfn7MpjVgaod2MT2CwYD3R BGXmpAgHg31COMO7O1073ir+yiyYO5ugz2oZWWd7MlwLgiZz3OAgJ6K5PCiCgQy0Cc0Etk zkbCK5JGCTI3AT+H0YZotMF6syp0FrOaw6l2B9jeeubLVzPX4+9tspFpzRdlcQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1782840125; a=rsa-sha256; cv=none; b=WCEY2RtUUUDcz7PCBDRY9uHWyXdesG7bN58yW6Njw9+dNSmeVbEtCG4J/PdzXXXvg1O5w1 0CKtMDFPqPAMDrQsg+bwqdbXBczsyR/aNM4OL+UBWToNgMqJkOR77o6ki3Nbh3tEBlmJGm 8zFVIAZVNkv//cLPvzBJDUjl0bvZ9bRRHkc9uL8wl21z+vd1tmqgggOjYPTm6oYZL12c6u +QB0VaMAqj2G4OUWsDlFE0BXccIzY2GZXrbvG+mLUWpbhf0/q0SAxlFgmfo9A/Q0HPFmz8 /TbeW8BwnLxRRqz+8gaNv4r47U0Mvm3dBGzzmOtbwpCwCFZ0WsuETFO0B+D1Xg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1782840125; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=BkHe1wv0k/7cM7OjXy7cpcBL6M1epJ5rOwRZJTi47YA=; b=jUmUNsmSdtoUEnTlEMveGh2lk08hW6WCoWLyCTI9TEYZDBG5Zz3K/oM4cPS4QKxGJe31x2 Mcbfs68tAOV6RNaRfQRn68p8fnqGYO5p867rRf0q2LdTT0ZX8O+8w6eUXjhK318mMdBMhU dVOuYm9px9sM2XCV3X2qlb9aOeo9jErdnlXhIEcYupFBNMbXz/jFBQridyMbfEXM/HKboS hKRjh6gv1wRcMSY/6UxbRvO0T13ivJDneEsatjarSsCxzVET+MVr5W7eQKWWPw/r+8luEG yesaWvbgO9qOhL2x+oBNzsNzOctX0RKRwQWeX5MBCxAng+qOeq1gwVTk3hBIUQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gqVM073Hrztnp for ; Tue, 30 Jun 2026 17:22:04 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 45f78 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 30 Jun 2026 17:22:04 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Kyle Evans From: Mark Johnston Subject: git: 8666a62872de - releng/15.1 - kern: fix auditing of ptrace(2) syscall requests List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/releng/15.1 X-Git-Reftype: branch X-Git-Commit: 8666a62872def3356d42de5632f47cd33a804363 Auto-Submitted: auto-generated Date: Tue, 30 Jun 2026 17:22:04 +0000 Message-Id: <6a43fb3c.45f78.654ccfe7@gitrepo.freebsd.org> The branch releng/15.1 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=8666a62872def3356d42de5632f47cd33a804363 commit 8666a62872def3356d42de5632f47cd33a804363 Author: Kyle Evans AuthorDate: 2026-06-25 17:02:47 +0000 Commit: Mark Johnston CommitDate: 2026-06-29 19:16:41 +0000 kern: fix auditing of ptrace(2) syscall requests `error` here is the return value of syscall_thread_enter() rather than the syscall itself, so the committed audit records do not reflect reality. This is less harmful than them recording an error when the operation actually succeeded, but it could still possibly be used to throw off IDS techniques with things like bsmtrace. Approved by: so Security: FreeBSD-SA-26:45.audit Security: CVE-2026-49426 Reviewed by: des, kib, markj, csjp Differential Revision: https://reviews.freebsd.org/D57847 --- sys/kern/kern_sig.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c index e48997ed966a..fed5b62ee1c7 100644 --- a/sys/kern/kern_sig.c +++ b/sys/kern/kern_sig.c @@ -2766,7 +2766,7 @@ ptrace_syscallreq(struct thread *td, struct proc *p, td->td_errno = nerror; if (audited) - AUDIT_SYSCALL_EXIT(error, td); + AUDIT_SYSCALL_EXIT(tsr->ts_ret.sr_error, td); if (!sy_thr_static) syscall_thread_exit(td, se); }