[Bug 2723] New: drop two additional privileges (DAX_ACCESS and SYS_IB_INFO) from solaris sandbox

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2723

            Bug ID: 2723
           Summary: drop two additional privileges (DAX_ACCESS and
                    SYS_IB_INFO) from solaris sandbox
           Product: Portable OpenSSH
           Version: 7.5p1
          Hardware: Sparc
                OS: Solaris
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: huieying.lee at oracle.com

Created attachment 2984
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2984&action=edit
drop_more_priv_in_solaris_sandbox

In the "solaris" sandbox at the pre-authentication phase, many
privileges are deleted from the privilege separation child process.
Attached patch is to drop two additional privileges, PRIV_DAX_ACCESS
and PRIV_SYS_IB_INFO, from the "solaris" sandbox. 

Note that PRIV_DAX_ACCESS and PRIV_SYS_IB_INFO are supported in newer
Solaris releases, for example, S11U3.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.