[Midnightbsd-cvs] [MidnightBSD/src] 28f71c: capsicum: restrict sigqueue in capability mode

[Lucas Holt]

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 28f71c1aa9fa7bdf351982bec4949d0e610127ea
      https://github.com/MidnightBSD/src/commit/28f71c1aa9fa7bdf351982bec4949d0e610127ea
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M contrib/capsicum-test/capmode.cc
    M sys/kern/kern_sig.c

  Log Message:
  -----------
  capsicum: restrict sigqueue in capability mode

A process in capability mode should only be able to signal itself through sigqueue(2), matching the existing kill(2) restriction.  Reject attempts to target other PIDs with ECAPMODE before normal signal permission checks.

Add regression coverage to the Capsicum SelfKill test so sigqueue(2) is checked alongside kill(2).

CVE-2026-45259

AI-Assisted-by: Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: e830b6d9fca34311e4ebc01f5ba7453623aaf254
      https://github.com/MidnightBSD/src/commit/e830b6d9fca34311e4ebc01f5ba7453623aaf254
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note capsicum sigqueue fix

Record the CVE-2026-45259 capability mode restriction for sigqueue(2).

AI-Assisted-by: Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


Compare: https://github.com/MidnightBSD/src/compare/117b0dd9ab22...e830b6d9fca3

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications