]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
sh: Add -o verify to use O_VERIFY when sourcing scripts
authorStephane Rochoy <stephane.rochoy@stormshield.eu>
Thu, 23 Sep 2021 08:40:59 +0000 (10:40 +0200)
committerWojciech Macek <wma@FreeBSD.org>
Thu, 23 Sep 2021 08:43:09 +0000 (10:43 +0200)
commitd2c233176f44944ef3ed941a60010839340c06a7
tree2794d8c5bd9db09b831248eef2f235ed16aa25d7
parent90f6610b197550d841bcc13b7c2a90be627443b5
sh: Add -o verify to use O_VERIFY when sourcing scripts

Add -o verify to sh to make it use O_VERIFY when
sourcing scripts and reading profiles.

Useful in conjunction with mac_veriexec to help protect at
least some parts of the boot sequence, e.g., /etc/rc*.

Differential revision: https://reviews.freebsd.org/D30464
Reviewed by: jilles, sjg
Obtained from: Stormshield
bin/sh/exec.c
bin/sh/histedit.c
bin/sh/input.c
bin/sh/input.h
bin/sh/main.c
bin/sh/main.h
bin/sh/options.c
bin/sh/options.h
bin/sh/sh.1