⬢ DragonFlyBSD Kernel Audit
DF-3081 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
--- a/sys/vfs/procfs/procfs_vnops.c	2026-09-06 02:38:07.821579527 +0000
+++ b/sys/vfs/procfs/procfs_vnops.c	2026-09-06 02:38:07.821579527 +0000
@@ -653,6 +653,16 @@
 			error = EINVAL;
 		}
 
+		/*
+		 * The executable path is privileged information; apply
+		 * the same policy as procfs_docmdline (procfs_status.c).
+		 */
+		if (error == 0 &&
+		    (!CHECKIO(curproc, procp) ||
+		     p_trespass(curproc->p_ucred, procp->p_ucred))) {
+			error = EINVAL;
+		}
+
 		if (error == 0) {
 			vap->va_size = strlen(fullpath);
 			kfree(freepath, M_TEMP);
@@ -1154,6 +1164,14 @@
 			error = EINVAL;
 		}
 
+		/*
+		 * The executable path is privileged information; apply
+		 * the same policy as procfs_docmdline (procfs_status.c).
+		 */
+		if (!CHECKIO(curproc, procp) ||
+		    p_trespass(curproc->p_ucred, procp->p_ucred))
+			error = EINVAL;
+
 		if (error != 0) {
 			pfs_pdone(procp);
 			return (uiomove("unknown", sizeof("unknown") - 1,