Searched hist:"5 fab7614f4f201cfa378f11f5523ebce0015ccab" (Results 1 – 1 of 1) sorted by relevance
| /freebsd/sys/kern/ |
| H A D | kern_prot.c | diff 5fab7614f4f201cfa378f11f5523ebce0015ccab Fri Nov 02 17:41:06 CET 2001 Robert Watson <rwatson@FreeBSD.org> o Add a comment to p_candebug() noting that the P_INEXEC check should
really be moved elsewhere: p_candebug() encapsulates the security
policy decision, whereas the P_INEXEC check has to do with "correctness"
regarding race conditions, rather than security policy.
Example: even if no security protections were enforced (the "uids are
advisory" model), removing P_INEXEC could result in incorrect operation
due to races on credential evaluation and modification during execve().
Obtained from: TrustedBSD Project
diff 5fab7614f4f201cfa378f11f5523ebce0015ccab Fri Nov 02 17:41:06 CET 2001 Robert Watson <rwatson@FreeBSD.org> o Add a comment to p_candebug() noting that the P_INEXEC check should
really be moved elsewhere: p_candebug() encapsulates the security
policy decision, whereas the P_INEXEC check has to do with "correctness"
regarding race conditions, rather than security policy.
Example: even if no security protections were enforced (the "uids are
advisory" model), removing P_INEXEC could result in incorrect operation
due to races on credential evaluation and modification during execve().
Obtained from: TrustedBSD Project
|