svn commit: r337965 - head/sys/kern

[Mariusz Zaborski]

Author: oshogbo
Date: Fri Aug 17 14:35:10 2018
New Revision: 337965
URL: https://svnweb.freebsd.org/changeset/base/337965

Log:
  capsicum: allow the setproctitle(3) function in capability mode
  
  Capsicum in past allowed to change the process title.
  This was broken with r335939.
  
  PR:		230584
  Submitted by:	Yuichiro NAITO <naito.yuichiro at gmail.com>
  Reported by:	ian at niw.com.au
  MFC after:	1 week

Modified:
  head/sys/kern/kern_exec.c

Modified: head/sys/kern/kern_exec.c
==============================================================================
--- head/sys/kern/kern_exec.c	Fri Aug 17 13:24:48 2018	(r337964)
+++ head/sys/kern/kern_exec.c	Fri Aug 17 14:35:10 2018	(r337965)
@@ -123,7 +123,7 @@ static int do_execve(struct thread *td, struct image_a
 
 /* XXX This should be vm_size_t. */
 SYSCTL_PROC(_kern, KERN_PS_STRINGS, ps_strings, CTLTYPE_ULONG|CTLFLAG_RD|
-    CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
+    CTLFLAG_CAPRD|CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
 
 /* XXX This should be vm_size_t. */
 SYSCTL_PROC(_kern, KERN_USRSTACK, usrstack, CTLTYPE_ULONG|CTLFLAG_RD|