svn commit: r338369 - stable/11/sys/kern

[Mariusz Zaborski]

Author: oshogbo
Date: Wed Aug 29 08:35:23 2018
New Revision: 338369
URL: https://svnweb.freebsd.org/changeset/base/338369

Log:
  MFC r337965:
    capsicum: allow the setproctitle(3) function in capability mode
  
    Capsicum in past allowed to change the process title.
    This was broken with r335939.
  
    PR:           230584
    Submitted by: Yuichiro NAITO <naito.yuichiro at gmail.com>
    Reported by:  ian at niw.com.au
    MFC after:    1 week

Modified:
  stable/11/sys/kern/kern_exec.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/kern/kern_exec.c
==============================================================================
--- stable/11/sys/kern/kern_exec.c	Wed Aug 29 06:49:12 2018	(r338368)
+++ stable/11/sys/kern/kern_exec.c	Wed Aug 29 08:35:23 2018	(r338369)
@@ -121,7 +121,7 @@ static int do_execve(struct thread *td, struct image_a
 
 /* XXX This should be vm_size_t. */
 SYSCTL_PROC(_kern, KERN_PS_STRINGS, ps_strings, CTLTYPE_ULONG|CTLFLAG_RD|
-    CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
+    CTLFLAG_CAPRD|CTLFLAG_MPSAFE, NULL, 0, sysctl_kern_ps_strings, "LU", "");
 
 /* XXX This should be vm_size_t. */
 SYSCTL_PROC(_kern, KERN_USRSTACK, usrstack, CTLTYPE_ULONG|CTLFLAG_RD|