Liav A e598f22768 Kernel: Disallow executing SUID binaries if process is jailed ... Check if the process we are currently running is in a jail, and if that is the case, fail early with the EPERM error code. Also, as Brian noted, we should also disallow attaching to a jail in case of already running within a setid executable, as this leaves the user with false thinking of being secure (because you can't exec new setid binaries), but the current program is still marked setid, which means that at the very least we gained permissions while we didn't expect it, so let's block it.		2022-12-30 15:49:37 -05:00
..
man1	Documentation: Update FontEditor document to be in-sync with latest	2022-12-30 09:12:36 -05:00
man2	Base: Mention pledge promise for jail-specific syscalls	2022-12-26 04:59:54 +03:30
man3	Everywhere: Clean up "the the" comment typos	2022-11-03 17:38:32 +00:00
man4	Documentation: Move IPC endpoint documentation to manpage section 4	2022-07-11 11:35:56 +02:00
man5	LibCore: Use ';' to split socket path in SOCKET_TAKEOVER	2022-12-15 12:33:36 -05:00
man6	Games: Add ColorLines	2022-12-12 17:30:04 +00:00
man7	Kernel: Disallow executing SUID binaries if process is jailed	2022-12-30 15:49:37 -05:00
man8	Base: Use new global variables at /sys/kernel/ directory	2022-10-25 15:33:34 -06:00