From owner-cvs-src@FreeBSD.ORG  Mon Jul 28 09:03:54 2003
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 127BA37B401; Mon, 28 Jul 2003 09:03:54 -0700 (PDT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id B749143F85; Mon, 28 Jul 2003 09:03:53 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h6SG3r0U015889;
	Mon, 28 Jul 2003 09:03:53 -0700 (PDT)
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h6SG3rss015888;
	Mon, 28 Jul 2003 09:03:53 -0700 (PDT)
Message-Id: <200307281603.h6SG3rss015888@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Mon, 28 Jul 2003 09:03:53 -0700 (PDT)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/kern kern_descrip.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Jul 2003 16:03:54 -0000

rwatson     2003/07/28 09:03:53 PDT

  FreeBSD src repository

  Modified files:
    sys/kern             kern_descrip.c 
  Log:
  When exporting file descriptor data for threads invoking the
  kern.file sysctl, don't return information about processes that
  fail p_cansee(td, p).  This prevents sockstat and related
  programs from seeing file descriptors owned by processes not
  in the same jail as the thread, as well as having implications
  for MAC, etc.
  
  This is a partial solution: it permits an information leak about
  the number of descriptors in the sizing calculation (but this is
  not new information, you can also get it from kern.openfiles),
  and doesn't attempt to mask file descriptors based on the
  properties of the descriptor, only the process referencing it.
  However, it provides most of what you want under most
  circumstances, without complicating the locking.
  
  PR:     54211
  Based on a patch submitted by:  Pawel Jakub Dawidek <nick@garage.freebsd.pl>
  
  Revision  Changes    Path
  1.211     +11 -0     src/sys/kern/kern_descrip.c