Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/share/man/man4 Remove current bug, now that PR kern/50627 is...



details:   https://anonhg.NetBSD.org/src/rev/7188f68724d3
branches:  trunk
changeset: 342853:7188f68724d3
user:      pgoyette <pgoyette%NetBSD.org@localhost>
date:      Mon Jan 11 01:45:27 2016 +0000

description:
Remove current bug, now that PR kern/50627 is fixed.  Add another security
consideration concerning re-used of the target/monitored process's pid.

diffstat:

 share/man/man4/filemon.4 |  16 +++++-----------
 1 files changed, 5 insertions(+), 11 deletions(-)

diffs (31 lines):

diff -r 893288d45818 -r 7188f68724d3 share/man/man4/filemon.4
--- a/share/man/man4/filemon.4  Mon Jan 11 01:37:36 2016 +0000
+++ b/share/man/man4/filemon.4  Mon Jan 11 01:45:27 2016 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: filemon.4,v 1.17 2016/01/06 05:22:06 wiz Exp $
+.\"    $NetBSD: filemon.4,v 1.18 2016/01/11 01:45:27 pgoyette Exp $
 .\"
 .\" Copyright (c) 2011, Juniper Networks, Inc.
 .\"
@@ -218,17 +218,11 @@
 .Sh HISTORY
 .Nm
 was contributed by Juniper Networks.
-.Sh BUGS
-If the file descriptor to which monitored events are being written is
-numerically lower than the descriptor on which
-.Pa /dev/filemon
-is open, the monitoring process will hang when it calls
-.Xr exit 3
-or an attempt is made to close the output file descriptor.
-To avoid the hang, ensure that the file descriptor on which
-.Pa /dev/filemon
-is open gets closed first.
 .Sh SECURITY CONSIDERATIONS
+If the monitored process exits, and its pid gets reused, filemon will
+continue to report events for the new process (and its descendants)
+without any authorization checks.
+.Pp
 Monitoring of a process enables the target process to write to the
 tracking process's file descriptor.
 .Sh RESTRICTIONS



Home | Main Index | Thread Index | Old Index