en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/tests/sys/mac/do/Makefile#96bf349029d495c6aa2d67efc14b24aad7989e3b cred: Fix group_is_primary()This helper wasn't updated in commit be1f7435ef21, so in reality it wastesting whether "gid" is the first supplemental group. If a userdoesn't belong to a supplementary group, then it's testing anuninitialized slot; since ucreds are allocated with M_ZERO, thistypically means that we're testing gid == 0.group_is_primary() has exactly one use, in mac_do. There, it's used todetermine whether the requested primary GID can be used in a setcred(2)call when the ruleset does not explicitly specify a target primary GID.I believe this is mostly exploitable by daemons which have explicitlydropped privileges and called setgroups(0, NULL); logged in users willhave a non-empty supplementary group list by virtue of having gonethrough initgroups(3).Fix group_is_primary(), and add a regression test.Approved by: soSecurity: FreeBSD-SA-26:59.mac_doSecurity: CVE-2026-58092Reported by: Hazley Samsudin of GovTech CSGFixes: be1f7435ef21 ("kern: start tracking cr_gid outside of cr_groups[]")Reviewed by: olce, kevansSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D59051 List of files: /freebsd/tests/sys/mac/do/Makefile Mon, 24 Aug 2026 20:13:29 +0200 Mark Johnston <markj@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/tests/sys/mac/do/Makefile#851499046d25fbe5841a55fb7bfcc879522f59a8 MAC/do: Add consistency testsTest that:1. Concurrent changes to different parameters on the same jail are independent/atomic.2. Inheritance works.3. Relaxing only parent jail rules does not leak to a subjail thanks to sequential consistency.4. Sysctl knobs and jail parameters stay consistent.Some of these tests may be extended in the future with several layers ofjails (there is only a single subjail currently).Reviewed by: baptMFC after: 1 monthSponsored by: The FreeBSD FoundationPull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 List of files: /freebsd/tests/sys/mac/do/Makefile Fri, 22 May 2026 16:33:18 +0200 Olivier Certner <olce@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/tests/sys/mac/do/Makefile#6159187329b56a9b550db193796ae4d76c1a306c MAC/do: Tests: Declare required programs closer to useReviewed by: baptMFC after: 3 daysSponsored by: The FreeBSD FoundationPull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 List of files: /freebsd/tests/sys/mac/do/Makefile Fri, 22 May 2026 16:19:57 +0200 Olivier Certner <olce@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/tests/sys/mac/do/Makefile#cba191e291c17b32247e12d6f94dcde56994bfe6 MAC/do: Add basic tests on setting rulesMFC after: 1 minuteSponsored by: The FreeBSD Foundation List of files: /freebsd/tests/sys/mac/do/Makefile Thu, 21 May 2026 15:34:14 +0200 Olivier Certner <olce@FreeBSD.org>