| /openbmc/linux/Documentation/translations/zh_CN/userspace-api/ |
| H A D | no_new_privs.rst | 14 execve系统调用可以给一个新启动的程序授予它的父程序本没有的权限。最明显的两个
26 用的机制来保证一个进程安全地修改其执行环境并跨execve持久化。任何任务都可以设
27 置 ``no_new_privs`` 。一旦该位被设置，它会在fork、clone和execve中继承下去
28 ，并且不能被撤销。在 ``no_new_privs`` 被设置的情况下， ``execve()`` 将保证
29 不会授予权限去做任何没有execve调用就不能做的事情。比如， setuid 和 setgid
31 LSM）不会在execve调用后放松限制。
41 请注意， ``no_new_privs`` 并不能阻止不涉及 ``execve()`` 的权限变化。一个拥有
46 - 为seccomp模式2沙箱安装的过滤器会跨execve持久化，并能够改变新执行程序的行为。
|
| H A D | seccomp_filter.rst | 60 如果 ``fork`` / ``clone`` 和 ``execve`` 被 @prog 所允许，任何子进程都将
|
| /openbmc/linux/tools/testing/selftests/exec/ |
| H A D | null-argv.c | 71 FORK(execve(argv[0], str, NULL)); in main()
72 FORK(execve(argv[0], NULL, NULL)); in main()
73 FORK(execve(argv[0], NULL, envp)); in main()
74 FORK(execve(argv[0], args, NULL)); in main()
75 FORK(execve(argv[0], args, envp)); in main()
|
| H A D | recursion-depth.c | 61 int rv = execve(FILENAME, NULL, NULL); in main()
|
| /openbmc/linux/Documentation/userspace-api/ |
| H A D | no_new_privs.rst | 5 The execve system call can grant a newly-started program privileges that
23 execution environment in a manner that persists across execve. Any task
25 clone, and execve and cannot be unset. With ``no_new_privs`` set, ``execve()``
27 been done without the execve call. For example, the setuid and setgid
30 execve.
42 involve ``execve()``. An appropriately privileged task can still call
48 execve and can change the behavior of newly-executed programs.
|
| H A D | spec_ctrl.rst | 43 cleared on :manpage:`execve(2)`.
|
| /openbmc/linux/Documentation/riscv/ |
| H A D | vector.rst | 34 enablement status on execve(). The system-wide default setting can be
50 at next execve(). bit[4] defines the inheritance mode of the setting in
62 Vector enablement setting for the calling thread at the next execve()
65 enablement status when execve() happen.
69 is set then the following execve() will not clear the setting in both
83 PR_RISCV_V_VSTATE_CTRL_NEXT_MASK happens at the next execve() call, or
84 all following execve() calls if PR_RISCV_V_VSTATE_CTRL_INHERIT bit is
92 next execve() call and the inheritance bit are all OR-ed together.
121 At every execve() call, a new enablement status of the new process is set to
132 status of any existing process of thread that do not make an execve() call.
|
| /openbmc/linux/Documentation/arch/arm64/ |
| H A D | asymmetric-32bit.rst | 19 ``execve(2)`` of 32-bit ELF binaries, with the latter returning
65 ``execve(2)``
69 ``execve(2)``. This is not always possible on an asymmetric system,
77 preserved across ``execve(2)`` of 32-bit programs.
90 A subsequent ``execve(2)`` of a 64-bit program by the 32-bit task will
94 policy or cpuset hierarchy, in which case the ``execve(2)`` continues
100 ``execve(2)`` is invalidated.
110 ``execve(2)`` of a 32-bit program from a 64-bit deadline task will
114 `execve(2)`_, in which case step (1) is skipped and a warning is
136 (2) of the process described in `execve(2)`_ and the cpuset hierarchy is
|
| H A D | sme.rst | 112 exceptions for execve() described in section 6.
192 Inherit the current vector length across execve(). Otherwise, the
193 vector length is reset to the system default at execve(). (See
198 Defer the requested vector length change until the next execve()
202 call immediately after the next execve() (if any) by the thread:
221 to be applied at the next execve() by the thread (dependent on whether
234 vector length that will be applied at the next execve() by the calling
258 Vector length will be inherited across execve().
262 fork() or vfork() and the corresponding execve() in typical use).
395 * At every execve() call, the new vector length of the new process is set to
[all …]
|
| H A D | sve.rst | 128 exceptions for execve() described in section 6.
217 Inherit the current vector length across execve(). Otherwise, the
218 vector length is reset to the system default at execve(). (See
223 Defer the requested vector length change until the next execve()
227 call immediately after the next execve() (if any) by the thread:
247 to be applied at the next execve() by the thread (dependent on whether
260 vector length that will be applied at the next execve() by the calling
278 Vector length will be inherited across execve().
282 fork() or vfork() and the corresponding execve() in typical use).
444 * At every execve() call, the new vector length of the new process is set to
[all …]
|
| /openbmc/linux/tools/perf/trace/strace/groups/ |
| H A D | file | 4 execve
|
| H A D | string | 10 execve
|
| /openbmc/qemu/bsd-user/freebsd/ |
| H A D | os-proc.c | 191 ret = get_errno(execve(qemu_proc_pathname, qargp, envp)); in freebsd_exec_common()
228 ret = get_errno(execve(qemu_proc_pathname, qargp, envp)); in freebsd_exec_common()
232 ret = get_errno(execve(p, argp, envp)); in freebsd_exec_common()
|
| /openbmc/linux/tools/testing/selftests/timens/ |
| H A D | exec.c | 80 execve("/proc/self/exe", cargv, cenv); in main()
|
| H A D | vfork_exec.c | 120 execve("/proc/self/exe", cargv, cenv); in main()
|
| /openbmc/linux/tools/testing/selftests/riscv/vector/ |
| H A D | vstate_exec_nolibc.c | 33 rc = execve(THIS_PROGRAM, exec_argv, exec_envp); in main()
|
| H A D | vstate_prctl.c | 36 rc = execve(NEXT_PROGRAM, exec_argv, exec_envp); in launch_test()
|
| /openbmc/linux/tools/perf/bench/ |
| H A D | syscall.c | 65 execve(pathname, argv, NULL); in test_execve()
|
| /openbmc/linux/tools/testing/selftests/rlimits/ |
| H A D | rlimits-per-userns.c | 81 execve(service_prog, argv, envp); in fork_child()
|
| /openbmc/linux/tools/testing/selftests/powerpc/dexcr/ |
| H A D | hashchk_test.c | 133 execve("/proc/self/exe", hashchk_exec_child_args, NULL); in hashchk_exec_random_key_test()
|
| /openbmc/linux/tools/testing/selftests/powerpc/benchmarks/ |
| H A D | fork.c | 79 if (execve("./exec_target", argv, NULL) == -1) { in run_exec()
|
| /openbmc/qemu/tests/qemu-iotests/ |
| H A D | check | 163 os.execve(cmd[0], cmd, full_env)
|
| /openbmc/qemu/linux-user/mips/ |
| H A D | syscall-args-o32.c.inc | 12 [ 11] = 3, /* execve */
|
| /openbmc/linux/Documentation/security/ |
| H A D | credentials.rst | 167 ``execve()``.
170 ``execve()``, especially when a binary is executed that will execute as
177 execve(). They aren't used directly as objective or subjective
242 operations allowed or disallowed as a result. In the case of execve(), the
446 ``execve()``.
|
| /openbmc/linux/kernel/ |
| H A D | audit.h | 200 } execve; member
|