Lines Matching +full:system +full:- +full:control

35 .Nd control processes
45 system call provides for control over processes.
50 arguments specify the set of processes to control.
55 to control as many of the selected processes as possible.
59 .Bl -tag -width P_PGID
61 Control the process with the process ID
66 Control processes belonging to the process group with the ID
70 The control request to perform is specified by the
82 .Bl -tag -width PROC_LOGSIGEXIT_STATUS
89 the control or modify it by other means.
94 .Bl -tag -width Ds
97 system-wide.
100 system-wide.
102 Use the system-wide configured policy for ASLR.
108 flag takes precedence over this control.
110 Similarly, executing a set-user-ID or set-group-ID binary ignores this
111 control and only honors the
113 flag and system-wide policy.
120 .Bl -tag -width Ds
129 flag is or-ed with the value listed above.
136 .Bl -tag -width PROC_LOGSIGEXIT_CTL_FORCE_DISABLE
158 .Bl -tag -width PROC_LOGSIGEXIT_CTL_FORCE_DISABLE
189 .Bl -tag -width Ds
201 Use the system-wide configured policy for the implicit PROT_MAX control.
207 flag takes precedence over this control.
211 Returns the current status of the implicit PROT_MAX control for the
217 .Bl -tag -width Ds
224 control enabled, the
226 flag is or-ed with the value listed above.
229 This is used to mark a process as protected from being killed if the system
236 .Bl -tag -width Ds
244 .Bl -tag -width Ds
263 When this control is enabled,
273 After system initialization,
289 structure which is filled in by the system call on successful return.
290 .Bd -literal
303 .Bl -tag -width Ds
334 otherwise, it is set to \-1.
343 .Bd -literal
365 .Bd -literal
379 the (grand-)parent of the descendant process.
383 .Bl -tag -width Ds
388 Zero-filling the
415 .Bd -literal
433 It is or-ed from the following flags:
434 .Bl -tag -width Ds
461 field is set to \-1.
476 .Bl -tag -width Ds
483 Tracing is re-enabled when the process changes the executing
486 system call.
501 is set to \-1.
504 system call,
513 on a return from any system call which fails with either an
518 If this control is enabled and a system call fails with one of these errors,
522 system call.
527 .Bl -tag -width Ds
551 signal handler parameter is set to the system call error value,
556 The system call number is stored in the
561 The other system call parameters can be read from the
563 but the system call number is typically stored in the register
586 above, which gives independent global control of signal delivery.
597 and when executing set-user-ID or set-group-ID binaries.
637 .Bl -tag -width Ds
644 After gaps are disabled in a process, they can only be re-enabled when an
670 .Bl -tag -width Ds
692 by the control.
694 Allows one to ignore the set-user-ID and set-group-ID bits on the program
702 .Bl -tag -width Ds
704 Request set-user-ID and set-group-ID bits to be ignored.
707 It is not possible to disable this control once it has been enabled.
709 Returns the current status of set-ID bits enablement for the target process.
714 .Bl -tag -width Ds
725 .Bl -tag -width Ds
743 sysctl is non-zero or the
746 flag is set in the ELF control note.
763 .Bl -tag -width Ds
781 .Sh x86 MACHINE-SPECIFIC REQUESTS
782 .Bl -tag -width PROC_KPTI_STATUS
787 This control is only meaningful if KPTI has been enabled globally by the
798 .Bl -tag -width Ds
814 .Bl -tag -width Ds
819 The status is or-ed with
826 and via other system mechanisms.
836 If an error occurs, a value of \-1 is returned and
842 system call
844 .Bl -tag -width Er
912 request to re-enable tracing of the process