⬢ DragonFlyBSD Kernel Audit
DF-0037 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
diff --git a/sys/kern/kern_prot.c b/sys/kern/kern_prot.c
--- a/sys/kern/kern_prot.c
+++ b/sys/kern/kern_prot.c
@@ -122,7 +122,12 @@
 	}
 	if (error == 0) {
 		lwkt_gettoken_shared(&pt->p_token);
-		sysmsg->sysmsg_result = pt->p_pgrp->pg_id;
+		if (pt->p_session != p->p_session &&
+		    caps_priv_check(p->p_ucred, SYSCAP_NOPROC_TRESPASS)) {
+			error = EPERM;
+		} else {
+			sysmsg->sysmsg_result = pt->p_pgrp->pg_id;
+		}
 		lwkt_reltoken(&pt->p_token);
 	}
 	if (pt)
@@ -150,8 +155,14 @@
 		if (pt == NULL)
 			error = ESRCH;
 	}
-	if (error == 0)
-		sysmsg->sysmsg_result = pt->p_session->s_sid;
+	if (error == 0) {
+		if (pt->p_session != p->p_session &&
+		    caps_priv_check(p->p_ucred, SYSCAP_NOPROC_TRESPASS)) {
+			error = EPERM;
+		} else {
+			sysmsg->sysmsg_result = pt->p_session->s_sid;
+		}
+	}
 	if (pt)
 		PRELE(pt);
 	return (error);