diff options
| author |   guenther <guenther@openbsd.org> | 2012-09-01 08:42:15 +0000 |
|---|---|---|
| committer | guenther <guenther@openbsd.org> | 2012-09-01 08:42:15 +0000 |
| commit | 6f5803875a3011ca5264c9951f5d426a8e3827ea (patch) | |
| tree | d61624805c4ecb118eb308a37e8a967e1c48703d | |
| parent | Strip out stuff specific to the old uthreads and add similar bits for (diff) | |
| download | wireguard-openbsd-6f5803875a3011ca5264c9951f5d426a8e3827ea.tar.xz wireguard-openbsd-6f5803875a3011ca5264c9951f5d426a8e3827ea.zip | |
Document that systrace fds, like kqueues, cannot be shared.
P_SUGID and P_SUGIDEXEC are now PS_* flags
| -rw-r--r-- | share/man/man4/systrace.4 | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/share/man/man4/systrace.4 b/share/man/man4/systrace.4 index f05a8200e13..ed58d9a6026 100644 --- a/share/man/man4/systrace.4 +++ b/share/man/man4/systrace.4 @@ -1,4 +1,4 @@ -.\" $OpenBSD: systrace.4,v 1.18 2011/06/22 09:32:33 djm Exp $ +.\" $OpenBSD: systrace.4,v 1.19 2012/09/01 08:42:15 guenther Exp $ .\" .\" Copyright (c) 2002, 2003 CubeSoft Communications, Inc. .\" All rights reserved. @@ -24,7 +24,7 @@ .\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: June 22 2011 $ +.Dd $Mdocdate: September 1 2012 $ .Dt SYSTRACE 4 .Os .Sh NAME @@ -142,8 +142,8 @@ This is sent whenever the kernel frees the policy identified by .It SYSTR_MSG_EXECVE This message is sent whenever, before a call to .Xr execve 2 -a process is privileged (technically, the process has the P_SUGID or -P_SUGIDEXEC flag set), +a process is privileged (technically, the process has the PS_SUGID or +PS_SUGIDEXEC flag set), but after the call these privileges have been dropped. The new image name is specified in the .Va path @@ -162,6 +162,11 @@ file descriptor for further .Xr ioctl 2 operations. +The returned +.Nm +file descriptor is not inherited by a child created with +.Xr fork 2 . +Similarly, they cannot be passed across UNIX-domain sockets. .It Dv STRIOCATTACH Fa "pid_t *" Attach to a process, unless: .Bl -enum -compact -width 2n |