RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 16:37:35 +00:00
Code Issues Activity Actions

Kernel: Make the purge() syscall superuser-only

Browse source 
I don't think we need to give unprivileged users access to what is
essentially a kernel testing mechanism.
This commit is contained in:
Andreas Kling 2020-01-02 13:37:23 +01:00
parent 907b090ddf
commit 7f843ef3b2
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Base/usr/share/man/man8/purge.md
View file

@ -23,6 +23,6 @@ If no options are specified, all possible memory is released.
## Examples ## Examples
```sh ```sh
$ purge # purge
Purged page count: 744 Purged page count: 744
``` ```

2
Kernel/Process.cpp
View file

@ -463,6 +463,8 @@ int Process::sys$madvise(void* address, size_t size, int advice)
int Process::sys$purge(int mode) int Process::sys$purge(int mode)
{ {
if (!is_superuser())
return -EPERM;
int purged_page_count = 0; int purged_page_count = 0;
if (mode & PURGE_ALL_VOLATILE) { if (mode & PURGE_ALL_VOLATILE) {
NonnullRefPtrVector<PurgeableVMObject> vmobjects; NonnullRefPtrVector<PurgeableVMObject> vmobjects;