sys/kern/kern_pledge.c

66 #include <sys/pledge.h>
181 	 * Address selection required a network pledge ("inet",
187 	 * Address specification required a network pledge ("inet",
528 		 * longer are holding any path-accessing pledge
563 	/* Print first matching pledge */
577 	log(LOG_ERR, "%s[%d]: pledge \"%s\", syscall %d\n",
601 	uint64_t pledge;
607 	pledge = READ_ONCE(p->p_p->ps_pledge);
619 	    (pledge & PLEDGE_EXEC))
627 	if ((pledge & PLEDGE_TMPPATH) &&
638 	if ((pledge & PLEDGE_TMPPATH) &&
664 		if ((pledge & PLEDGE_TTY) &&
673 		    (pledge & PLEDGE_GETPW)) {
692 		    (pledge & PLEDGE_DNS)) {
728 		    (pledge & PLEDGE_DNS)) {
745 	if (ni->ni_pledge & ~pledge)
746 		return (pledge_fail(p, EPERM, (ni->ni_pledge & ~pledge)));
813 	uint64_t pledge;
818 	pledge = READ_ONCE(p->p_p->ps_pledge);
824 	if ((pledge & PLEDGE_ROUTE)) {
846 	if ((pledge & PLEDGE_WROUTE)) {
853 	if (pledge & (PLEDGE_PS | PLEDGE_VMINFO)) {
874 	if ((pledge & PLEDGE_PS)) {
893 	if ((pledge & PLEDGE_VMINFO)) {
906 	if ((pledge & (PLEDGE_INET | PLEDGE_UNIX))) {
912 	if ((pledge & (PLEDGE_ROUTE | PLEDGE_INET | PLEDGE_DNS))) {
921 	if ((pledge & PLEDGE_DISKLABEL)) {
1002 	snprintf(buf, sizeof(buf), "%s(%d): pledge sysctl %d:",
1062 	uint64_t pledge;
1066 	pledge = READ_ONCE(p->p_p->ps_pledge);
1086 	if ((pledge & PLEDGE_INET)) {
1097 	if ((pledge & PLEDGE_BPF)) {
1110 	if ((pledge & PLEDGE_TAPE)) {
1127 	if ((pledge & PLEDGE_DRM)) {
1139 	if ((pledge & PLEDGE_AUDIO)) {
1158 	if ((pledge & PLEDGE_DISKLABEL)) {
1185 	if ((pledge & PLEDGE_VIDEO)) {
1227 	if ((pledge & PLEDGE_PF)) {
1250 	if ((pledge & PLEDGE_TTY)) {
1254 			if ((pledge & PLEDGE_RPATH) == 0)
1256 			if ((pledge & PLEDGE_WPATH) == 0)
1264 			if ((pledge & PLEDGE_RPATH) == 0)
1266 			if ((pledge & PLEDGE_WPATH) == 0)
1273 			if ((pledge & PLEDGE_PROC) == 0)
1302 	if ((pledge & PLEDGE_ROUTE)) {
1324 	if ((pledge & PLEDGE_WROUTE)) {
1341 	if ((pledge & PLEDGE_VMM)) {
1358 	uint64_t pledge;
1362 	pledge = READ_ONCE(p->p_p->ps_pledge);
1381 	if ((pledge & PLEDGE_WROUTE)) {
1391 	if ((pledge & (PLEDGE_INET|PLEDGE_UNIX|PLEDGE_DNS)) == 0)
1404 	if ((pledge & PLEDGE_DNS)) {
1415 	if ((pledge & (PLEDGE_INET|PLEDGE_UNIX)) == 0)
1426 	if ((pledge & PLEDGE_INET) == 0)
1458 			if (pledge & PLEDGE_MCAST)
1481 			if (pledge & PLEDGE_MCAST)
1495 	uint64_t pledge;
1499 	pledge = READ_ONCE(p->p_p->ps_pledge);
1502 		if (ISSET(pledge, PLEDGE_DNS))
1512 		if (ISSET(pledge, PLEDGE_INET))
1517 		if (ISSET(pledge, PLEDGE_UNIX))