From nobody Sat Sep 05 00:35:18 2026 X-Original-To: dev-commits-src-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hcDrQ54Fdz6qZPm for ; Sat, 05 Sep 2026 00:35:18 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR2" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hcDrQ2ySwz43y4 for ; Sat, 05 Sep 2026 00:35:18 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1788568518; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=vic3l1STpXhuegIhj80UrH80t50KeXAv8rmATvNp3M0=; b=q8O+HHn0Jx7kNOQklqWr0M3NXyxn23pwOsJDpCZrSvIvB0w2LvmdmbgZXJtwbe84RT1uBk PX146EzQ8SFwgZr+7ro5wSKMaVLdM3N2Zy6GDoWu1Vf/5TBN83WtS3JrjQGhCAkU8la1Hg i7qQz643m8iiEYr0kirvHksaV+uhvX5Z+BpnzTazOvrkKJ598zTs+YdWdbLBfho8M7PmwS hMhNfbA60aIB0RkOiGJpj2R+2uX3153GosqxqK3lKZdKlxBvoJtT8FsVMIOY80MnC4prHR L/P2taicY+0f6DcZj6DDyzPoFJKbDPSbdlKMeEP9SzZW18VqrHyPWuWoene4tQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1788568518; a=rsa-sha256; cv=none; b=P/XZdwN0EyumwSbEjy4SwHWalbht3AZog67gk99yorHKt5icR9W6GFtipdgDI18pC3733c 1N53agfIFfcBhO/tvo1qogNsqagvOmrp7twBz5VYxotGrjYz6Ai2+H/Tt4rKnRtyMmx2or QylyxtcwJ+ac3a/MGNOmVwqc/GAYUCEAQpv1/XPC4et8mkoe6/mQuATphVb0QgShz8jkUn RXb2npWXgoWO7eVmxl2dAQ1pFJGv1x0nCRs2Bv6ktLhPxnzhRcx+oxOpy+vP7zagAbTp1A my975lVAbYTCKHWKsrJJ18rdj4GYorrTF2Uqpoks9fqBz635CV3LucqDmACvkQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1788568518; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=vic3l1STpXhuegIhj80UrH80t50KeXAv8rmATvNp3M0=; b=L9y7/nqO8GXxeMPhnD+Ckqyf0F7F8aLc9pQsQBeeqWpFIB8NsqxTLVBeJJdkz7zE/i6PwW jtEsnGiVVUounEw1IP02fz3/8vqO2q32e+PuCqESp1XbhtbumvUZc4rKeoBQoet1tSRsOb 0M5iGndv4dXgy/KYGJisvno4MH6kvOPas4lASG1hVdVpJ0bP9qR7wZf7u46OjoWjTHQEBq Ty5O707JQi6t4Gbewa8OVutd8d5BmZqPLoV4AcDIxMby5hKfFkSxrIqrSEhOsEUz/INSXA uER9szyfm1b5CJFj+KG9KdIkG8aTDDql9721VV0UBARa4LaylrwLOAxUjSnXlA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4hcDrQ1fWVz7xw for ; Sat, 05 Sep 2026 00:35:18 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 1f2a7 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sat, 05 Sep 2026 00:35:18 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Konstantin Belousov Subject: git: 73e3e21d3285 - stable/15 - pdfork(2): add PD_PTRACE_CAP flag List-Id: Commits to the stable branches of the FreeBSD src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-branches@freebsd.org Sender: owner-dev-commits-src-branches@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kib X-Git-Repository: src X-Git-Refname: refs/heads/stable/15 X-Git-Reftype: branch X-Git-Commit: 73e3e21d32855569fe1315f739746e9e321c7c4a Auto-Submitted: auto-generated Date: Sat, 05 Sep 2026 00:35:18 +0000 Message-Id: <6a9b63c6.1f2a7.4f185ffe@gitrepo.freebsd.org> The branch stable/15 has been updated by kib: URL: https://cgit.FreeBSD.org/src/commit/?id=73e3e21d32855569fe1315f739746e9e321c7c4a commit 73e3e21d32855569fe1315f739746e9e321c7c4a Author: Konstantin Belousov AuthorDate: 2026-07-07 23:46:56 +0000 Commit: Konstantin Belousov CommitDate: 2026-09-05 00:33:38 +0000 pdfork(2): add PD_PTRACE_CAP flag (cherry picked from commit e8c313204887e7ba47b5c349acbe37d64a3162a1) --- sys/kern/kern_fork.c | 14 ++++++++++++++ sys/kern/sys_procdesc.c | 7 ++++++- sys/sys/procdesc.h | 6 ++++-- 3 files changed, 24 insertions(+), 3 deletions(-) diff --git a/sys/kern/kern_fork.c b/sys/kern/kern_fork.c index 9bdaca27f4e1..ea47e8168257 100644 --- a/sys/kern/kern_fork.c +++ b/sys/kern/kern_fork.c @@ -41,6 +41,7 @@ #include #include #include +#include #include #include #include @@ -119,6 +120,7 @@ int sys_pdfork(struct thread *td, struct pdfork_args *uap) { struct fork_req fr; + struct filecaps fcaps; int error, fd, pid; bzero(&fr, sizeof(fr)); @@ -126,6 +128,10 @@ sys_pdfork(struct thread *td, struct pdfork_args *uap) fr.fr_pidp = &pid; fr.fr_pd_fd = &fd; fr.fr_pd_flags = uap->flags; + filecaps_fill(&fcaps); + if ((uap->flags & PD_PTRACE_CAP) == 0) + cap_rights_clear(&fcaps.fc_rights, CAP_PTRACE); + fr.fr_pd_fcaps = &fcaps; AUDIT_ARG_FFLAGS(uap->flags); /* * It is necessary to return fd by reference because 0 is a valid file @@ -194,6 +200,7 @@ int sys_pdrfork(struct thread *td, struct pdrfork_args *uap) { struct fork_req fr; + struct filecaps fcaps; int error, fd, pid; bzero(&fr, sizeof(fr)); @@ -226,6 +233,10 @@ sys_pdrfork(struct thread *td, struct pdrfork_args *uap) fr.fr_pidp = &pid; fr.fr_pd_fd = &fd; fr.fr_pd_flags = uap->pdflags; + filecaps_fill(&fcaps); + if ((uap->pdflags & PD_PTRACE_CAP) == 0) + cap_rights_clear(&fcaps.fc_rights, CAP_PTRACE); + fr.fr_pd_fcaps = &fcaps; error = fork1(td, &fr); if (error == 0) { td->td_retval[0] = pid; @@ -1067,6 +1078,7 @@ fork1(struct thread *td, struct fork_req *fr) fr->fr_pd_flags, fr->fr_pd_fcaps); if (error != 0) goto fail2; + fr->fr_pd_fcaps = NULL; AUDIT_ARG_FD(*fr->fr_pd_fd); } @@ -1162,6 +1174,8 @@ fail2: fdclose(td, fp_procdesc, *fr->fr_pd_fd); fdrop(fp_procdesc, td); } + if (fr->fr_pd_fcaps != NULL) + filecaps_free(fr->fr_pd_fcaps); atomic_add_int(&nprocs, -1); cleanup: if (killsx_locked) diff --git a/sys/kern/sys_procdesc.c b/sys/kern/sys_procdesc.c index 0d0ca7b6871c..5ee8a4734248 100644 --- a/sys/kern/sys_procdesc.c +++ b/sys/kern/sys_procdesc.c @@ -692,6 +692,7 @@ kern_pdopenpid(struct thread *td, pid_t pid, int flags) { struct file *fp; struct procdesc *pdf; + struct filecaps fcaps; int error, fd, fflags; error = falloc_noinstall(td, &fp); @@ -701,13 +702,16 @@ kern_pdopenpid(struct thread *td, pid_t pid, int flags) pdf = procdesc_alloc(flags); if ((flags & PD_DAEMON) != 0) fp->f_pdflags |= F_PD_NOKILL; + filecaps_fill(&fcaps); + if ((flags & PD_PTRACE_CAP) == 0) + cap_rights_clear(&fcaps.fc_rights, CAP_PTRACE); sx_xlock(&proctree_lock); error = pdopenpid1(td, pid, &pdf, fp); sx_xunlock(&proctree_lock); if (error == 0) { - error = finstall(td, fp, &fd, fflags, NULL); + error = finstall(td, fp, &fd, fflags, &fcaps); if (error == 0) { td->td_retval[0] = fd; } else { @@ -716,6 +720,7 @@ kern_pdopenpid(struct thread *td, pid_t pid, int flags) * return file descriptor to userspace. */ fp->f_pdflags |= F_PD_NOKILL | F_PD_NOFINSTALL; + filecaps_free(&fcaps); } } fdrop(fp, td); diff --git a/sys/sys/procdesc.h b/sys/sys/procdesc.h index 6cb837af2d3b..f4cba787db01 100644 --- a/sys/sys/procdesc.h +++ b/sys/sys/procdesc.h @@ -161,8 +161,10 @@ __END_DECLS #define PD_DAEMON 0x00000001 /* Don't exit when procdesc closes. */ #define PD_CLOEXEC 0x00000002 /* Close file descriptor on exec. */ #define PD_NOWAITPID 0x00000004 /* Reap without waitpid(). */ +#define PD_PTRACE_CAP 0x00000008 /* Allow PT_PROCDESC in cap mode. */ -#define PD_ALLOWED_AT_FORK (PD_DAEMON | PD_CLOEXEC | PD_NOWAITPID) -#define PD_ALLOWED_AT_OPENPID (PD_DAEMON | PD_CLOEXEC) +#define PD_ALLOWED_AT_FORK \ + (PD_DAEMON | PD_CLOEXEC | PD_NOWAITPID | PD_PTRACE_CAP) +#define PD_ALLOWED_AT_OPENPID (PD_DAEMON | PD_CLOEXEC | PD_PTRACE_CAP) #endif /* !_SYS_PROCDESC_H_ */