[Bug 220524] pidfile_remove(3) is broken in capability mode

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Jul 6 16:37:32 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220524

            Bug ID: 220524
           Summary: pidfile_remove(3) is broken in capability mode
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: markj at FreeBSD.org

pidfile_remove() uses unlink() to remove the pidfile, so it will always fail
when called in capability mode. It would be nice if the pidfile code used
Capsicum-friendly syscalls instead. pidfile_open() could keep a descriptor for
the directory containing the requested pidfile, and later use unlinkat() to
remove it.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list