HomeFreeBSD

New cr_bsd_visible(): Whether BSD policies deny seeing subjects/objects

Description

New cr_bsd_visible(): Whether BSD policies deny seeing subjects/objects

This is a new helper function that leverages existing code: It calls
successively cr_canseeotheruids(), cr_canseeothergids() and
cr_canseejailproc() (as long as the previous didn't deny access). Will
be used in a subsequent commit.

Reviewed by: mhorne
Sponsored by: Kumacom SAS
Differential Revision: https://reviews.freebsd.org/D40627

(cherry picked from commit e4a7b4f99cfd4931468c0866da4ae8b49cf5badb)

Approved by: markj (mentor)

Details

Provenance
olceAuthored on Aug 17 2023, 11:54 PM
Reviewer
mhorne
Differential Revision
D40627: New cr_bsd_visible(): Whether BSD policies deny seeing subjects/objects
Parents
rGd40c6fa7db7d: cr_canseejailproc(): New privilege, no direct check for UID 0
Branches
Unknown
Tags
Unknown