| /linux/Documentation/translations/zh_CN/userspace-api/ |
| H A D | no_new_privs.rst | 14 execve系统调用可以给一个新启动的程序授予它的父程序本没有的权限。最明显的两个
26 用的机制来保证一个进程安全地修改其执行环境并跨execve持久化。任何任务都可以设
27 置 ``no_new_privs`` 。一旦该位被设置，它会在fork、clone和execve中继承下去
28 ，并且不能被撤销。在 ``no_new_privs`` 被设置的情况下， ``execve()`` 将保证
29 不会授予权限去做任何没有execve调用就不能做的事情。比如， setuid 和 setgid
31 LSM）不会在execve调用后放松限制。
41 请注意， ``no_new_privs`` 并不能阻止不涉及 ``execve()`` 的权限变化。一个拥有
46 - 为seccomp模式2沙箱安装的过滤器会跨execve持久化，并能够改变新执行程序的行为。
|
| H A D | seccomp_filter.rst | 60 如果 ``fork`` / ``clone`` 和 ``execve`` 被 @prog 所允许，任何子进程都将
|
| /linux/tools/testing/selftests/exec/ |
| H A D | null-argv.c | 71 FORK(execve(argv[0], str, NULL)); in main()
72 FORK(execve(argv[0], NULL, NULL)); in main()
73 FORK(execve(argv[0], NULL, envp)); in main()
74 FORK(execve(argv[0], args, NULL)); in main()
75 FORK(execve(argv[0], args, envp)); in main()
|
| H A D | recursion-depth.c | 62 rv = execve(FILENAME, NULL, NULL); in main()
|
| /linux/Documentation/userspace-api/ |
| H A D | no_new_privs.rst | 5 The execve system call can grant a newly-started program privileges that
23 execution environment in a manner that persists across execve. Any task
25 clone, and execve and cannot be unset. With ``no_new_privs`` set, ``execve()``
27 been done without the execve call. For example, the setuid and setgid
30 execve.
42 involve ``execve()``. An appropriately privileged task can still call
48 execve and can change the behavior of newly-executed programs.
|
| /linux/Documentation/arch/riscv/ |
| H A D | vector.rst | 34 enablement status on execve(). The system-wide default setting can be
50 at next execve(). bit[4] defines the inheritance mode of the setting in
62 Vector enablement setting for the calling thread at the next execve()
65 enablement status when execve() happen.
69 is set then the following execve() will not clear the setting in both
83 PR_RISCV_V_VSTATE_CTRL_NEXT_MASK happens at the next execve() call, or
84 all following execve() calls if PR_RISCV_V_VSTATE_CTRL_INHERIT bit is
92 next execve() call and the inheritance bit are all OR-ed together.
121 At every execve() call, a new enablement status of the new process is set to
132 status of any existing process of thread that do not make an execve() call.
|
| /linux/tools/perf/trace/strace/groups/ |
| H A D | file | 4 execve
|
| H A D | string | 10 execve
|
| /linux/tools/testing/selftests/powerpc/dexcr/ |
| H A D | dexcr_test.c | 141 execve("/proc/self/exe", args, NULL); in dexcr_prctl_aspect_test()
163 execve("/proc/self/exe", args, NULL); in dexcr_prctl_aspect_test()
|
| H A D | hashchk_test.c | 139 execve("/proc/self/exe", hashchk_exec_child_args, NULL); in hashchk_exec_random_key_test()
|
| /linux/Documentation/arch/arm64/ |
| H A D | sme.rst | 102 exceptions for execve() described in section 6.
182 Inherit the current vector length across execve(). Otherwise, the
183 vector length is reset to the system default at execve(). (See
188 Defer the requested vector length change until the next execve()
192 call immediately after the next execve() (if any) by the thread:
211 to be applied at the next execve() by the thread (dependent on whether
224 vector length that will be applied at the next execve() by the calling
248 Vector length will be inherited across execve().
252 fork() or vfork() and the corresponding execve() in typical use).
388 * At every execve() call, the new vector length of the new process is set to
[all …]
|
| /linux/tools/testing/selftests/landlock/ |
| H A D | sandbox-and-launch.c | 79 execve(argv[0], argv, NULL); in main()
|
| /linux/tools/testing/selftests/riscv/vector/ |
| H A D | v_helpers.c | 70 rc = execve(next_program, exec_argv, exec_envp);
72 perror("execve");
73 printf("child execve failed %d\n", rc);
|
| H A D | vstate_exec_nolibc.c | 39 rc = execve(THIS_PROGRAM, exec_argv, exec_envp); in main()
41 puts("child execve failed\n"); in main()
|
| /linux/tools/testing/selftests/timens/ |
| H A D | exec.c | 80 /* Check for proper vvar offsets after execve. */ in main()
82 execve("/proc/self/exe", cargv, cenv); in main()
83 return pr_perror("execve"); in main()
|
| H A D | vfork_exec.c | 120 /* Check for proper vvar offsets after execve. */ in main()
122 execve("/proc/self/exe", cargv, cenv); in main()
123 pr_perror("execve"); in main()
|
| /linux/tools/perf/bench/ |
| H A D | syscall.c | 64 execve(pathname, argv, NULL); in test_execve()
65 fprintf(stderr, "execve /bin/true failed\n"); in test_execve()
130 name = "execve()"; in bench_syscall_common()
|
| /linux/tools/testing/selftests/rlimits/ |
| H A D | rlimits-per-userns.c | 81 execve(service_prog, argv, envp); in fork_child()
|
| /linux/arch/um/os-Linux/ |
| H A D | main.c | 120 execve(buf, argv, envp); in main()
|
| /linux/Documentation/translations/zh_CN/security/ |
| H A D | ipe.rst | 326 ``execve`` 和 ``uselib`` 这些系统调用必须有规则进行保护，
|
| /linux/tools/testing/selftests/powerpc/benchmarks/ |
| H A D | fork.c | 79 if (execve("./exec_target", argv, NULL) == -1) { in run_exec()
|
| /linux/tools/testing/selftests/riscv/abi/ |
| H A D | pointer_masking.c | 184 execve("/proc/self/exe", (char *const []) { "", NULL }, NULL); in test_fork_exec()
|
| /linux/tools/perf/arch/x86/entry/syscalls/ |
| H A D | syscall_64.tbl | 71 59 64 execve sys_execve
415 520 x32 execve compat_sys_execve
|
| /linux/tools/perf/arch/sparc/entry/syscalls/ |
| H A D | syscall.tbl | 82 59 32 execve sys_execve sys32_execve
83 59 64 execve sys64_execve
|
| /linux/Documentation/arch/powerpc/ |
| H A D | dexcr.rst | 124 :manpage:`execve(2)`. The PR_PPC_SET_DEXCR prctl() can control both of these
|