diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-07-19 02:35:35 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-07-19 02:35:35 +0000 |
| commit | 586b470f3a48386e9005eb2372f8b7d7b2210f1f (patch) | |
| tree | 08b5d85af5fb101552c8de4e8c5ebb6d8e87b6f8 /sys/kern/kern_fork.c | |
| parent | Remove the logic responsible for outputting most AES-NI instructions as (diff) | |
| download | wireguard-openbsd-586b470f3a48386e9005eb2372f8b7d7b2210f1f.tar.xz wireguard-openbsd-586b470f3a48386e9005eb2372f8b7d7b2210f1f.zip | |
tame(2) is a subsystem which restricts programs into a "reduced feature
operating model". This is the kernel component; various changes should
proceed in-tree for a while before userland programs start using it.
ok miod, discussions and help from many
Diffstat (limited to 'sys/kern/kern_fork.c')
| -rw-r--r-- | sys/kern/kern_fork.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/kern/kern_fork.c b/sys/kern/kern_fork.c index ec92be51948..e7f7c1b138d 100644 --- a/sys/kern/kern_fork.c +++ b/sys/kern/kern_fork.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_fork.c,v 1.180 2015/03/14 07:33:42 jsg Exp $ */ +/* $OpenBSD: kern_fork.c,v 1.181 2015/07/19 02:35:35 deraadt Exp $ */ /* $NetBSD: kern_fork.c,v 1.29 1996/02/09 18:59:34 christos Exp $ */ /* @@ -203,7 +203,7 @@ process_new(struct proc *p, struct process *parent, int flags) if (pr->ps_textvp) vref(pr->ps_textvp); - pr->ps_flags = parent->ps_flags & (PS_SUGID | PS_SUGIDEXEC); + pr->ps_flags = parent->ps_flags & (PS_SUGID | PS_SUGIDEXEC | PS_TAMED); if (parent->ps_session->s_ttyvp != NULL) pr->ps_flags |= parent->ps_flags & PS_CONTROLT; |