diff options
| author | Edward Tomasz Napierala <trasz@FreeBSD.org> | 2021-07-20 08:56:04 +0000 |
|---|---|---|
| committer | Edward Tomasz Napierala <trasz@FreeBSD.org> | 2021-07-20 08:57:53 +0000 |
| commit | a40cf4175c90142442d0c6515f6c83956336699b (patch) | |
| tree | 2302b71f611e87f35c16412c749b41dfe20f7039 /libexec | |
| parent | 27ab791a55191c0b6503391d411303b042b41047 (diff) | |
Implement unprivileged chroot
This builds on recently introduced NO_NEW_PRIVS flag to implement
unprivileged chroot, enabled by `security.bsd.unprivileged_chroot`.
It allows non-root processes to chroot(2), provided they have the
NO_NEW_PRIVS flag set.
The chroot(8) utility gets a new flag, -n, which sets NO_NEW_PRIVS
before chrooting.
Reviewed By: kib
Sponsored By: EPSRC
Relnotes: yes
Differential Revision: https://reviews.freebsd.org/D30130
Diffstat (limited to 'libexec')
0 files changed, 0 insertions, 0 deletions