summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorderaadt <deraadt@openbsd.org>1998-07-14 19:51:11 +0000
committerderaadt <deraadt@openbsd.org>1998-07-14 19:51:11 +0000
commit79ab4e23687278f44a73badefeedd20c41c1c735 (patch)
treeff365b9a40f89199b60ef55a6c801335506ade40 /lib
parentfix exit codes, adding X_STARTUP; jkoshy@freebsd (diff)
downloadwireguard-openbsd-79ab4e23687278f44a73badefeedd20c41c1c735.tar.xz
wireguard-openbsd-79ab4e23687278f44a73badefeedd20c41c1c735.zip
document setuid/setgid restrictions
Diffstat (limited to 'lib')
-rw-r--r--lib/libc/sys/kill.217
1 files changed, 16 insertions, 1 deletions
diff --git a/lib/libc/sys/kill.2 b/lib/libc/sys/kill.2
index a32a4c9979e..ddd45a632fb 100644
--- a/lib/libc/sys/kill.2
+++ b/lib/libc/sys/kill.2
@@ -1,4 +1,4 @@
-.\" $OpenBSD: kill.2,v 1.3 1998/07/06 18:27:44 deraadt Exp $
+.\" $OpenBSD: kill.2,v 1.4 1998/07/14 19:51:11 deraadt Exp $
.\" $NetBSD: kill.2,v 1.7 1995/02/27 12:33:53 cgd Exp $
.\"
.\" Copyright (c) 1980, 1991, 1993
@@ -91,6 +91,21 @@ with the same uid as the user excluding the process sending the signal.
No error is returned if any process could be signaled.
.El
.Pp
+Setuid and setgid processes are dealt with slightly differently. For
+the non-root user, to prevent attacks against such processes, some signal
+deliveries are not permitted and return the error EPERM.
+The following signals are allowed through to this class of processes:
+.Em SIGKILL ,
+.Em SIGINT ,
+.Em SIGTERM ,
+.Em SIGSTOP ,
+.Em SIGTTIN ,
+.Em SIGTTOU ,
+.Em SIGTSTP ,
+.Em SIGHUP ,
+.Em SIGUSR1 ,
+.Em SIGUSR2 .
+.Pp
For compatibility with System V,
if the process number is negative but not -1,
the signal is sent to all processes whose process group ID