Changeset 23499

Timestamp:

2008-01-28 10:38:20 (9 months ago)

Author:

zarzycki@…

Message:

<rdar://problem/5653227> work with Seatbelt to provide access control on spawn_via_launchd

Location:

branches/SULeopard/launchd/src

Files:

• launchd_core_logic.c (modified) (1 diff)
• libbootstrap_private.h (modified) (1 diff)

branches/SULeopard/launchd/src/launchd_core_logic.c

@@ -6549 +6549 @@
                 } else {
                         target_j->deny_unknown_mslookups = !(flags & BOOTSTRAP_ALLOW_LOOKUP);
+                        target_j->deny_job_creation = (bool)(flags & BOOTSTRAP_DENY_JOB_CREATION);
                 }
         } else {

branches/SULeopard/launchd/src/libbootstrap_private.h

@@ -30 +30 @@
 #define BOOTSTRAP_PER_PID_SERVICE       0x1
 #define BOOTSTRAP_ALLOW_LOOKUP          0x2
+#define BOOTSTRAP_DENY_JOB_CREATION     0x4
 
 kern_return_t bootstrap_register2(mach_port_t bp, name_t service_name, mach_port_t sp, uint64_t flags);