diff options
author | Eitan Adler <eadler@FreeBSD.org> | 2012-10-22 03:37:00 +0000 |
---|---|---|
committer | Eitan Adler <eadler@FreeBSD.org> | 2012-10-22 03:37:00 +0000 |
commit | c9657073118a0216de5987ebf590896db2c4d62b (patch) | |
tree | 48e39ec389d81c9066712a2e3bf46936f9c8f2bd /lib/libc/sys | |
parent | 10950e46515da3beb0fe383f3c45ef2c380e8aee (diff) | |
download | src-c9657073118a0216de5987ebf590896db2c4d62b.tar.gz src-c9657073118a0216de5987ebf590896db2c4d62b.zip |
Update the kill(2) and killpg(2) man pages to the modern permission
checks. Also indicate killpg(2) is POSIX compliant.
Reviewed by: jilles
Reviewed by: wblock
Approved by: cperciva
MFC after: 3 days
Notes
Notes:
svn path=/head/; revision=241855
Diffstat (limited to 'lib/libc/sys')
-rw-r--r-- | lib/libc/sys/kill.2 | 23 |
1 files changed, 15 insertions, 8 deletions
diff --git a/lib/libc/sys/kill.2 b/lib/libc/sys/kill.2 index 03895590edbf..98c305086404 100644 --- a/lib/libc/sys/kill.2 +++ b/lib/libc/sys/kill.2 @@ -64,11 +64,19 @@ This can be used to check the validity of For a process to have permission to send a signal to a process designated by .Fa pid , -the real or effective user ID of the receiving process must match -that of the sending process or the user must have appropriate privileges -(such as given by a set-user-ID program or the user is the super-user). +the user must be the super-user, or +the real or saved user ID of the receiving process must match +the real or effective user ID of the sending process. A single exception is the signal SIGCONT, which may always be sent -to any process with the same session ID as the caller. +to any process with the same session ID as the sender. +In addition, if the +.Va security.bsd.conservative_signals +.Xr sysctl +is set to 1, the user is not a super-user, and +the receiver is set-uid, then +only job control and terminal control signals may +be sent (in particular, only SIGKILL, SIGINT, SIGTERM, SIGALRM, +SIGSTOP, SIGTTIN, SIGTTOU, SIGTSTP, SIGHUP, SIGUSR1, SIGUSR2). .Bl -tag -width Ds .It \&If Fa pid No \&is greater than zero : The @@ -124,10 +132,9 @@ is not a valid signal number. No process or process group can be found corresponding to that specified by .Fa pid . .It Bq Er EPERM -The sending process is not the super-user and its effective -user id does not match the effective user-id of the receiving process. -When signaling a process group, this error is returned if any members -of the group could not be signaled. +The sending process does not have permission to send +.Va sig +to the receiving process. .El .Sh SEE ALSO .Xr getpgrp 2 , |