From casper@sac.sfbay.sun.com Tue Dec 22 06:29:13 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBMETDtl020491 for ; Tue, 22 Dec 2009 06:29:13 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id nBMETBVO052258; Tue, 22 Dec 2009 07:29:13 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KV2001195KON600@brm-avmta-1.central.sun.com>; Tue, 22 Dec 2009 07:29:12 -0700 (MST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KV200G385KN5160@brm-avmta-1.central.sun.com>; Tue, 22 Dec 2009 07:29:11 -0700 (MST) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBMETBv9012155; Tue, 22 Dec 2009 06:29:11 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBMETAw8020486; Tue, 22 Dec 2009 06:29:10 -0800 (PST) Received: (from casper@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id nBMETAke020482; Tue, 22 Dec 2009 06:29:10 -0800 (PST) Date: Tue, 22 Dec 2009 06:29:10 -0800 (PST) From: Casper Dik Subject: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] To: PSARC-ext@sun.com Message-id: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 3219 Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Improving the use and debugging of the basic privilege set. 1.2. Name of Document Author/Supplier: Author: Casper Dik 1.3 Date of This Document: 22 December, 2009 4. Technical Description I'm sponsoring this fasttrack for myself. Improving the use and debugging of the basic privilege set. The set of basic privileges was defined as set of privileges generally assumed available to ordinary users. It was designed such that the basic set could grow by defining privileges for certain previously unprivileged operations while still being able to portably manipulate privilege sets. A properly written application should initialize a privilege set with the basic set, then add additional privileges and remove unneeded basic privileges. When adding new basic privileges, it has become clear that not all programs handle the basic privileges correctly, e.g., by setting E or P to the empty set. In order to catch such problems early, is adding additional functionality to the kernel to debug privilege set operations. The new debugging functionality is implement as follows: The priv_debug kernel variable is initialized to 1 on DEBUG kernels. When priv_debug is non zero when the system boots, a new privilege is allocated and it is added to the basic set. The new privilege is called "basic_test". When setppriv() is called and the E and/or P privilege sets are modified, a message is logged when the "basic_test" privilege is removed from E/P. We allow setting I and L to the empty set only as a failsafe for applications which should not call exec(). When exec*() is called and I does not include the "basic_test" privilege, a message is logged. A properly written application will never remove the unknown "basic_test" privilege from E or P. An example of these messages is: WARNING: in.tftpd[105699]: setppriv: basic_test privilege removed from E/P and this programming error in in.tftpd later caused the following fatal error: NOTICE: in.tftpd[105699]: missing privilege "net_access" (euid = 60001, syscall = 230) for "devpolicy" needed at solookup+0x270 tftpd[105699]: socket (main): Permission denied And we also provide an additional API: priv_basicset(): fills the argument with the basic set. --- priv_addset.3 Mon Dec 21 12:08:24 2009 +++ priv_addset.3.new Mon Dec 21 12:10:00 2009 @@ -20,6 +20,8 @@ void priv_emptyset(priv_set_t *sp); + void priv_basicset(priv_set_t *sp); + void priv_fillset(priv_set_t *sp); void priv_freeset(priv_set_t *sp); @@ -58,6 +60,8 @@ The priv_emptyset() function clears all privileges from sp. + The priv_basicset() function copies the basic privilege set to sp. + The priv_fillset() function asserts all privileges in sp, includ- ing the privileges not currently defined in the system. Requested binding: micro/patch 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: osnet 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From gdamore@sun.com Tue Dec 22 07:17:08 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBMFH8WI021240 for ; Tue, 22 Dec 2009 07:17:08 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id nBMFH5sB023887 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 22 Dec 2009 08:17:08 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KV200L107SIQW00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 07:17:06 -0800 (PST) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KV200IE07SHOW40@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 07:17:05 -0800 (PST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nBMFH5Yd007108 for ; Tue, 22 Dec 2009 07:17:05 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KV2004007O50A00@fe-sfbay-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 07:17:05 -0800 (PST) Received: from [192.168.251.11] ([unknown] [76.93.15.33]) by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KV200F807SGH140@fe-sfbay-10.sun.com>; Tue, 22 Dec 2009 07:17:05 -0800 (PST) Date: Tue, 22 Dec 2009 07:17:04 -0800 From: "Garrett D'Amore" Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] In-reply-to: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Sender: Garrett.Damore@sun.com To: Casper Dik Cc: PSARC-ext@sun.com Message-id: <4B30E2F0.7050400@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200912221429.nBMETAke020482@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 3588 Looks like a good idea. I'm inclined to +1 it, but I'd prefer to let Darren or Gary (who are both more familiar with the privilege model than I am) do so instead. - Garrett Casper Dik wrote: > Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI > This information is Copyright 2009 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > Improving the use and debugging of the basic privilege set. > 1.2. Name of Document Author/Supplier: > Author: Casper Dik > 1.3 Date of This Document: > 22 December, 2009 > 4. Technical Description > I'm sponsoring this fasttrack for myself. > > Improving the use and debugging of the basic privilege set. > > The set of basic privileges was defined as set of privileges generally > assumed available to ordinary users. It was designed such that the basic > set could grow by defining privileges for certain previously unprivileged > operations while still being able to portably manipulate privilege sets. > > A properly written application should initialize a privilege set with > the basic set, then add additional privileges and remove unneeded basic > privileges. > > When adding new basic privileges, it has become clear that not all > programs handle the basic privileges correctly, e.g., by setting E or P > to the empty set. > > In order to catch such problems early, is adding additional functionality > to the kernel to debug privilege set operations. > > The new debugging functionality is implement as follows: > > The priv_debug kernel variable is initialized to 1 on > DEBUG kernels. > > When priv_debug is non zero when the system boots, > a new privilege is allocated and it is added to the basic set. > The new privilege is called "basic_test". > > When setppriv() is called and the E and/or P privilege sets are > modified, a message is logged when the "basic_test" privilege > is removed from E/P. We allow setting I and L to the empty set > only as a failsafe for applications which should not call exec(). > > When exec*() is called and I does not include the "basic_test" > privilege, a message is logged. > > A properly written application will never remove the unknown "basic_test" > privilege from E or P. > > An example of these messages is: > > WARNING: in.tftpd[105699]: setppriv: basic_test privilege removed from E/P > > and this programming error in in.tftpd later caused the following fatal error: > > NOTICE: in.tftpd[105699]: missing privilege "net_access" (euid = 60001, syscall = 230) for "devpolicy" needed at solookup+0x270 > tftpd[105699]: socket (main): Permission denied > > And we also provide an additional API: priv_basicset(): fills the > argument with the basic set. > > --- priv_addset.3 Mon Dec 21 12:08:24 2009 > +++ priv_addset.3.new Mon Dec 21 12:10:00 2009 > @@ -20,6 +20,8 @@ > > void priv_emptyset(priv_set_t *sp); > > + void priv_basicset(priv_set_t *sp); > + > void priv_fillset(priv_set_t *sp); > > void priv_freeset(priv_set_t *sp); > @@ -58,6 +60,8 @@ > > The priv_emptyset() function clears all privileges from sp. > > + The priv_basicset() function copies the basic privilege set to sp. > + > The priv_fillset() function asserts all privileges in sp, includ- > ing the privileges not currently defined in the system. > > > Requested binding: micro/patch > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > osnet > 6.5. ARC review type: FastTrack > 6.6. ARC Exposure: open > > From casper@holland.sun.com Tue Dec 22 07:52:24 2009 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBMFqO4b021747 for ; Tue, 22 Dec 2009 07:52:24 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBMFqLWj025769 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 22 Dec 2009 09:52:23 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KV20000N9FBJG00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 07:52:23 -0800 (PST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KV200I0L9FAOT70@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 07:52:22 -0800 (PST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBMFqKFe027858; Tue, 22 Dec 2009 15:52:20 +0000 (GMT) Date: Tue, 22 Dec 2009 16:52:20 +0100 From: Casper.Dik@sun.com Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] In-reply-to: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Sender: casper@holland.sun.com To: Casper Dik Cc: PSARC-ext@sun.com Message-id: <200912221552.nBMFqKFe027858@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Status: RO Content-Length: 45 Changed the timeout to 01/06/2010 Casper From Darren.Moffat@sun.com Tue Dec 22 09:41:30 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBMHfUPi023708 for ; Tue, 22 Dec 2009 09:41:30 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBMHfTra020956 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 22 Dec 2009 09:41:30 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KV200K0ZEH6GS00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 10:41:30 -0700 (MST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KV200C1GEH53C70@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 10:41:29 -0700 (MST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nBMHfSE3023792 for ; Tue, 22 Dec 2009 17:41:28 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KV200600EFJ7W00@fe-emea-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 22 Dec 2009 17:41:07 +0000 (GMT) Received: from [192.168.2.108] (99-52-200-208.lightspeed.snjsca.sbcglobal.net [99.52.200.208]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KV200C8REGCFX70@fe-emea-10.sun.com>; Tue, 22 Dec 2009 17:41:02 +0000 (GMT) Date: Mon, 21 Dec 2009 09:44:56 -0800 From: Darren J Moffat Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] In-reply-to: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Sender: Darren.Moffat@sun.com To: Casper Dik Cc: PSARC-ext@sun.com Message-id: <4B2FB418.3030103@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200912221429.nBMETAke020482@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091109) Status: RO Content-Length: 535 Casper Dik wrote: > The new debugging functionality is implement as follows: > > The priv_debug kernel variable is initialized to 1 on > DEBUG kernels. > > When priv_debug is non zero when the system boots, > a new privilege is allocated and it is added to the basic set. > The new privilege is called "basic_test". This makes sense as a debug functionality. Given this is for debug I don't actually think an ARC case was required unless the intent is to document this. So I'm happy to give this a +1. -- Darren J Moffat From Scott.Rotondo@sun.com Wed Dec 23 22:53:13 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBO6rDfg005065 for ; Wed, 23 Dec 2009 22:53:13 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBO6rD5c015049 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 23 Dec 2009 22:53:13 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KV5001019SPL700@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 23 Dec 2009 22:53:13 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KV500NDI9SO1X70@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 23 Dec 2009 22:53:12 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nBO6rC1O027815 for ; Thu, 24 Dec 2009 06:53:12 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KV500L009JJJW00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 23 Dec 2009 23:53:12 -0700 (MST) Received: from viaggio.local ([unknown] [69.226.236.206]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KV50098D9SNUS50@mail-amer.sun.com>; Wed, 23 Dec 2009 23:53:12 -0700 (MST) Date: Wed, 23 Dec 2009 22:53:25 -0800 From: Scott Rotondo Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] In-reply-to: <4B2FB418.3030103@Sun.COM> Sender: Scott.Rotondo@sun.com To: Darren J Moffat Cc: Casper Dik , PSARC-ext@sun.com Message-id: <4B330FE5.4080305@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200912221429.nBMETAke020482@sac.sfbay.sun.com> <4B2FB418.3030103@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Status: RO Content-Length: 778 Darren J Moffat wrote: > Casper Dik wrote: >> The new debugging functionality is implement as follows: >> >> The priv_debug kernel variable is initialized to 1 on >> DEBUG kernels. >> >> When priv_debug is non zero when the system boots, >> a new privilege is allocated and it is added to the basic set. >> The new privilege is called "basic_test". > > This makes sense as a debug functionality. Given this is for debug I > don't actually think an ARC case was required unless the intent is to > document this. So I'm happy to give this a +1. > I assume that we would document priv_basicset(). Scott -- Scott Rotondo Principal Engineer, Solaris Security Technologies President, Trusted Computing Group Phone/FAX: +1 408 850 3655 (Internal x68278) From casper@holland.sun.com Thu Dec 24 02:09:32 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBOA9WsK021712 for ; Thu, 24 Dec 2009 02:09:32 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id nBOA9V8r004023 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Thu, 24 Dec 2009 03:09:32 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KV50080JIVVQJ00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 24 Dec 2009 02:09:31 -0800 (PST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KV500NX8IVT1020@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 24 Dec 2009 02:09:30 -0800 (PST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBOA9Qu7000365; Thu, 24 Dec 2009 10:09:26 +0000 (GMT) Date: Thu, 24 Dec 2009 11:09:26 +0100 From: Casper.Dik@sun.com Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] In-reply-to: <4B330FE5.4080305@sun.com> Sender: casper@holland.sun.com To: Scott Rotondo Cc: Darren J Moffat , Casper Dik , PSARC-ext@sun.com Message-id: <200912241009.nBOA9Qu7000365@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200912221429.nBMETAke020482@sac.sfbay.sun.com> <4B2FB418.3030103@Sun.COM> <4B330FE5.4080305@sun.com> Status: RO Content-Length: 1310 >Darren J Moffat wrote: >> Casper Dik wrote: >>> The new debugging functionality is implement as follows: >>> >>> The priv_debug kernel variable is initialized to 1 on >>> DEBUG kernels. >>> >>> When priv_debug is non zero when the system boots, >>> a new privilege is allocated and it is added to the basic set. >>> The new privilege is called "basic_test". >> >> This makes sense as a debug functionality. Given this is for debug I >> don't actually think an ARC case was required unless the intent is to >> document this. So I'm happy to give this a +1. >> > >I assume that we would document priv_basicset(). This is why I put the difference to the manual page in the fasttrack. Casper --- priv_addset.3 Mon Dec 21 12:08:24 2009 +++ priv_addset.3.new Mon Dec 21 12:10:00 2009 @@ -20,6 +20,8 @@ void priv_emptyset(priv_set_t *sp); + void priv_basicset(priv_set_t *sp); + void priv_fillset(priv_set_t *sp); void priv_freeset(priv_set_t *sp); @@ -58,6 +60,8 @@ The priv_emptyset() function clears all privileges from sp. + The priv_basicset() function copies the basic privilege set to sp. + The priv_fillset() function asserts all privileges in sp, includ- ing the privileges not currently defined in the system. From gww@sac.sfbay.sun.com Mon Jan 4 11:57:25 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o04JvPBW022779 for ; Mon, 4 Jan 2010 11:57:25 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o04JvNiE026347 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 4 Jan 2010 13:57:25 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KVQ00107NFPWK00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 04 Jan 2010 11:57:25 -0800 (PST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KVQ00EZMNFLDR10@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 04 Jan 2010 11:57:21 -0800 (PST) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o04JvIeg015454; Mon, 04 Jan 2010 11:57:18 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o04JvIBN022776; Mon, 04 Jan 2010 11:57:18 -0800 (PST) Received: (from gww@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o04JvISj022775; Mon, 04 Jan 2010 11:57:18 -0800 (PST) Date: Mon, 04 Jan 2010 11:57:18 -0800 (PST) From: Gary Winiger Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] To: casper.dik@sun.com, Scott.Rotondo@sun.com Cc: Darren.Moffat@sun.com, PSARC-ext@sun.com, casper.dik@sun.com Message-id: <201001041957.o04JvISj022775@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 636 > --- priv_addset.3 Mon Dec 21 12:08:24 2009 > +++ priv_addset.3.new Mon Dec 21 12:10:00 2009 > @@ -20,6 +20,8 @@ > > void priv_emptyset(priv_set_t *sp); > > + void priv_basicset(priv_set_t *sp); > + > void priv_fillset(priv_set_t *sp); > > void priv_freeset(priv_set_t *sp); > @@ -58,6 +60,8 @@ > > The priv_emptyset() function clears all privileges from sp. > > + The priv_basicset() function copies the basic privilege set to sp. > + > The priv_fillset() function asserts all privileges in sp, includ- > ing the privileges not currently defined in the system. +1 Gary.. From casper@holland.sun.com Thu Jan 7 01:09:52 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0799pM6003371 for ; Thu, 7 Jan 2010 01:09:51 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o0799oOp046766 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 7 Jan 2010 02:09:51 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KVV00309DGFV900@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 07 Jan 2010 01:09:51 -0800 (PST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KVV00CK6DGEI9D0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 07 Jan 2010 01:09:51 -0800 (PST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0799nnq004474 for ; Thu, 07 Jan 2010 09:09:49 +0000 (GMT) Date: Thu, 07 Jan 2010 10:09:49 +0100 From: Casper.Dik@sun.com Subject: Re: Improving the use and debugging of the basic privilege set. [PSARC/2009/686 FastTrack timeout 01/01/2010] In-reply-to: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Sender: casper@holland.sun.com To: PSARC-ext@sun.com Message-id: <201001070909.o0799nnq004474@dm-holland-02.uk.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200912221429.nBMETAke020482@sac.sfbay.sun.com> Status: RO Content-Length: 58 This case was approved at today's PSARC meeting. Casper