1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-11-21 07:15:49 +00:00
freebsd/sys/security
Olivier Certner abd39811cd
cred: kern_setgroups(): Internally use int as number of groups' type
sys_setgroups() (and sys_getgroups()) was changed in commit "kern: fail
getgroup and setgroup with negative int" (4bc2174a1b) to take the
number of groups as an 'int' (for sys_getgroups(), POSIX mandates this
change; for sys_setgroups(), which it does not standardize, it's
arguably for consistency).

All our internal APIs related to groups on 'struct ucred', as well as
related members on the latter, treat that number as an 'int' as well
(and not a 'u_int').

Consequently, to avoid surprises, change kern_setgroups() to behave the
same, and fix audit_arg_groupset() accordingly.  With that change,
everything is handled with signed integers internally.

Update sanity checks accordingly.

Reviewed by:    mhorne
Approved by:    markj (mentor)
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D46912
2024-11-02 21:37:41 +01:00
..
audit cred: kern_setgroups(): Internally use int as number of groups' type 2024-11-02 21:37:41 +01:00
mac MAC: improve handling of listening sockets 2024-09-26 08:06:24 +02:00
mac_biba
mac_bsdextended
mac_ddb
mac_do mac_do(4): Enhance GID rule validation to check all groups in cr_groups 2024-10-29 02:58:12 +08:00
mac_grantbylabel
mac_ifoff
mac_ipacl
mac_lomac
mac_mls
mac_none
mac_ntpd
mac_partition
mac_pimd
mac_portacl
mac_priority
mac_seeotheruids
mac_stub
mac_test
mac_veriexec
mac_veriexec_parser