From owner-freebsd-stable@FreeBSD.ORG  Mon Mar 29 13:20:15 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D6C1A16A4D0
	for <stable@freebsd.org>; Mon, 29 Mar 2004 13:20:15 -0800 (PST)
Received: from gilmore.nas.nasa.gov (gilmore.nas.nasa.gov [129.99.33.42])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C7F7143D2D
	for <stable@freebsd.org>; Mon, 29 Mar 2004 13:20:15 -0800 (PST)
	(envelope-from tweten@nas.nasa.gov)
Received: from gilmore.nas.nasa.gov
	(IDENT:/ThGhydNQvnT8ZcHFYgihZ28zLVzefnq@localhost.nas.nasa.gov [127.0.0.1])
	i2TLKD6w002581
	for <stable@freebsd.org>; Mon, 29 Mar 2004 13:20:13 -0800 (PST)
	(envelope-from tweten@gilmore.nas.nasa.gov)
X-Mailer: exmh version 2.6.3 04/04/2003 with nmh-1.0.4
To: stable@freebsd.org
From: Dave Tweten <tweten@nas.nasa.gov>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Mon, 29 Mar 2004 13:20:12 -0800
Message-ID: <2580.1080595212@gilmore.nas.nasa.gov>
Sender: tweten@nas.nasa.gov
Subject: Ps(1) Restricting Command Lines
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: David.E.Tweten@nasa.gov
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Mar 2004 21:20:16 -0000

As of my STABLE upgrade to the 8:00 GMT Saturday version, I have noticed 
that ps(1) is behaving differently.  Unless run by root, "ps -ax" refuses 
to print the command line associated with each process.  I've checked a 
couple things:

1. /bin/ps is not SGID kmem and /dev/kmem permission is set to 0640,
   but that isn't the cause of this problem (though it may cause
   others, since the ps(1) man page says it needs to read /dev/kmem).

2. /proc/*/cmdline is owned by root:wheel and has 0444 permissions.
   It should therefore be usable by ps(1) regardless of who runs it.

So it looks like command lines should print, but they don't.  Does anybody 
know what's happening here?
-- 
M/S 258-5                    |1024-bit PGP fingerprint:|tweten@nas.nasa.gov
NASA Ames Research Center    | 41 B0 89 0A  8F 94 6C 59|     (650) 604-4416
Moffett Field, CA  94035-1000| 7C 80 10 20  25 C7 2F E6|FAX: (650) 604-4377
Not an official NASA position.  You can't even be certain who sent this!