From 92920fe422e74f509afe3d54b6d16afc3f823955 Mon Sep 17 00:00:00 2001
From: Theo de Raadt <deraadt@cvs.openbsd.org>
Date: Fri, 9 Oct 2015 23:55:04 +0000
Subject: Allow kill(self, sig) in pledge SELF also.  the stack protector,
 abort(), and readpassphrase() in particular use this. ok millert tedu semarie

---
 sys/kern/kern_sig.c | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'sys/kern/kern_sig.c')

diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c
index 87a85a1958d..e4a17024f77 100644
--- a/sys/kern/kern_sig.c
+++ b/sys/kern/kern_sig.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: kern_sig.c,v 1.184 2015/10/09 01:10:27 deraadt Exp $	*/
+/*	$OpenBSD: kern_sig.c,v 1.185 2015/10/09 23:55:03 deraadt Exp $	*/
 /*	$NetBSD: kern_sig.c,v 1.54 1996/04/22 01:38:32 christos Exp $	*/
 
 /*
@@ -62,6 +62,7 @@
 #include <sys/sched.h>
 #include <sys/user.h>
 #include <sys/syslog.h>
+#include <sys/pledge.h>
 
 #include <sys/mount.h>
 #include <sys/syscallargs.h>
@@ -569,6 +570,14 @@ sys_kill(struct proc *cp, void *v, register_t *retval)
 	int pid = SCARG(uap, pid);
 	int signum = SCARG(uap, signum);
 
+	if (cp->p_p->ps_flags & PS_PLEDGE) {
+		/* PLEDGE_PROC is required to signal another pid */
+		if ((cp->p_p->ps_pledge & PLEDGE_PROC) || pid == cp->p_pid)
+			;
+		else
+			return pledge_fail(cp, EPERM, PLEDGE_SELF);
+	}
+
 	if (((u_int)signum) >= NSIG)
 		return (EINVAL);
 	if (pid > 0) {
-- 
cgit v1.2.3