PLEDGE_PROC
(PLEDGE_VMM | PLEDGE_PROC)) == PLEDGE_VMM) &&
if (p->p_pledge & PLEDGE_PROC)
(curproc->p_pledge & PLEDGE_PROC) == 0)
return pledge_fail(curproc, EPERM, PLEDGE_PROC);
if ((pledge & PLEDGE_PROC) == 0)
if ((p->p_pledge & PLEDGE_PROC) == 0 && cmd == F_SETOWN)
return pledge_fail(p, EPERM, PLEDGE_PROC);
if (p->p_pledge & PLEDGE_PROC)
return pledge_fail(p, EPERM, PLEDGE_PROC);
[SYS_fork] = PLEDGE_PROC,
[SYS_vfork] = PLEDGE_PROC,
[SYS_setpgid] = PLEDGE_PROC,
[SYS_setsid] = PLEDGE_PROC,
[SYS_setrlimit] = PLEDGE_PROC | PLEDGE_ID,
[SYS_getpriority] = PLEDGE_PROC | PLEDGE_ID,
[SYS_setpriority] = PLEDGE_PROC | PLEDGE_ID,
{ "proc", PLEDGE_PROC },
{ PLEDGE_PROC, "proc" },