upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-09 08:43:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

security(7): security.bsd.see*: Be more accurate

Browse source 
Reviewed by:            mhorne, pauamma_gundo.com
MFC after:              2 weeks
Sponsored by:           Kumacom SAS
Differential Revision:  https://reviews.freebsd.org/D41108
This commit is contained in:
Olivier Certner 2023-08-18 01:54:48 +02:00 committed by Mitchell Horne
parent 845b7c8088
commit 61b6e00bee
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
share/man/man7/security.7
View file

@ -26,7 +26,7 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
.Dd March 30, 2023
.Dd August 18, 2023
.Dt SECURITY 7
.Os
.Sh NAME
@ -959,16 +959,18 @@ Backwards compatibility shims for the interim sysctls under
will not be added.
.Bl -tag -width security.bsd.unprivileged_proc_debug
.It Dv security.bsd.see_other_uids
Controls visibility of processes owned by different uid.
Controls visibility and reachability of subjects (e.g., processes) and objects
(e.g., sockets) owned by a different uid.
The knob directly affects the
.Dv kern.proc
sysctls filtering of data, which results in restricted output from
utilities like
.Xr ps 1 .
.It Dv security.bsd.see_other_gids
Same, for processes owned by different gid.
Same, for subjects and objects owned by a different gid.
.It Dv security.bsd.see_jail_proc
Same, for processes belonging to a jail.
Same, for subjects and objects belonging to a different jail, including
sub-jails.
.It Dv security.bsd.conservative_signals
When enabled, unprivileged users are only allowed to send job control
and usual termination signals like