From eacfe1d9ee67f8699ce4a97f8b8225a49f101801 Mon Sep 17 00:00:00 2001 From: jmc Date: Tue, 29 Apr 2025 17:44:00 +0000 Subject: [PATCH] remove references to fs.posix.setuid; ok tedu --- bin/chmod/chgrp.1 | 9 ++------- bin/chmod/chown.8 | 9 ++------- lib/libc/sys/chown.2 | 9 ++------- sbin/sysctl/sysctl.8 | 12 ++---------- share/man/man7/securelevel.7 | 5 ++--- 5 files changed, 10 insertions(+), 34 deletions(-) diff --git a/bin/chmod/chgrp.1 b/bin/chmod/chgrp.1 index 7be0c70fb8a..05eda1151a1 100644 --- a/bin/chmod/chgrp.1 +++ b/bin/chmod/chgrp.1 @@ -1,4 +1,4 @@ -.\" $OpenBSD: chgrp.1,v 1.19 2024/08/01 14:08:38 jmc Exp $ +.\" $OpenBSD: chgrp.1,v 1.20 2025/04/29 17:44:00 jmc Exp $ .\" .\" Copyright (c) 1983, 1990, 1993, 1994 .\" The Regents of the University of California. All rights reserved. @@ -32,7 +32,7 @@ .\" .\" from: @(#)chgrp.1 8.3 (Berkeley) 3/31/94 .\" -.Dd $Mdocdate: August 1 2024 $ +.Dd $Mdocdate: April 29 2025 $ .Dt CHGRP 1 .Os .Sh NAME @@ -108,11 +108,6 @@ By default, clears the set-user-ID and set-group-ID bits on the file to prevent accidental or mischievous creation of set-user-ID and set-group-ID programs. -This behaviour can be overridden by setting the -.Xr sysctl 8 -variable -.Va fs.posix.setuid -to zero. .Pp The user invoking .Nm diff --git a/bin/chmod/chown.8 b/bin/chmod/chown.8 index 6f3a245eb12..75c12c9087f 100644 --- a/bin/chmod/chown.8 +++ b/bin/chmod/chown.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: chown.8,v 1.24 2024/08/01 14:44:34 jmc Exp $ +.\" $OpenBSD: chown.8,v 1.25 2025/04/29 17:44:00 jmc Exp $ .\" .\" Copyright (c) 1990, 1991, 1993, 1994 .\" The Regents of the University of California. All rights reserved. @@ -29,7 +29,7 @@ .\" .\" from: @(#)chown.8 8.3 (Berkeley) 3/31/94 .\" -.Dd $Mdocdate: August 1 2024 $ +.Dd $Mdocdate: April 29 2025 $ .Dt CHOWN 8 .Os .Sh NAME @@ -128,11 +128,6 @@ By default, clears the set-user-ID and set-group-ID bits on the file to prevent accidental or mischievous creation of set-user-ID and set-group-ID programs. -This behaviour can be overridden by setting the -.Xr sysctl 8 -variable -.Va fs.posix.setuid -to zero. .Pp Only the superuser is permitted to change the owner of a file. .Sh EXIT STATUS diff --git a/lib/libc/sys/chown.2 b/lib/libc/sys/chown.2 index 717a4072e99..78efc612573 100644 --- a/lib/libc/sys/chown.2 +++ b/lib/libc/sys/chown.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: chown.2,v 1.27 2022/02/18 23:17:14 jsg Exp $ +.\" $OpenBSD: chown.2,v 1.28 2025/04/29 17:44:00 jmc Exp $ .\" $NetBSD: chown.2,v 1.10 1995/10/12 15:40:47 jtc Exp $ .\" .\" Copyright (c) 1980, 1991, 1993, 1994 @@ -30,7 +30,7 @@ .\" .\" @(#)chown.2 8.4 (Berkeley) 4/19/94 .\" -.Dd $Mdocdate: February 18 2022 $ +.Dd $Mdocdate: April 29 2025 $ .Dt CHOWN 2 .Os .Sh NAME @@ -72,11 +72,6 @@ By default, clears the set-user-ID and set-group-ID bits on the file to prevent accidental or mischievous creation of set-user-ID and set-group-ID programs. -This behaviour can be overridden by setting the -.Xr sysctl 8 -variable -.Va fs.posix.setuid -to zero. .Pp .Fn lchown operates similarly to how diff --git a/sbin/sysctl/sysctl.8 b/sbin/sysctl/sysctl.8 index 15510cd495c..71d5f04c5bf 100644 --- a/sbin/sysctl/sysctl.8 +++ b/sbin/sysctl/sysctl.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: sysctl.8,v 1.217 2025/04/05 14:09:06 kn Exp $ +.\" $OpenBSD: sysctl.8,v 1.218 2025/04/29 17:44:00 jmc Exp $ .\" $NetBSD: sysctl.8,v 1.4 1995/09/30 07:12:49 thorpej Exp $ .\" .\" Copyright (c) 1993 @@ -30,7 +30,7 @@ .\" .\" @(#)sysctl.8 8.2 (Berkeley) 5/9/95 .\" -.Dd $Mdocdate: April 5 2025 $ +.Dd $Mdocdate: April 29 2025 $ .Dt SYSCTL 8 .Os .Sh NAME @@ -146,14 +146,6 @@ To retrieve information about the load average history: .Pp .Dl $ sysctl vm.loadavg .Pp -To make the -.Xr chown 2 -system call use traditional -.Bx -semantics (don't clear setuid/setgid bits): -.Pp -.Dl # sysctl fs.posix.setuid=0 -.Pp To set the list of reserved TCP ports that should not be allocated by the kernel dynamically: .Pp diff --git a/share/man/man7/securelevel.7 b/share/man/man7/securelevel.7 index 9381529baec..b26ff0524a5 100644 --- a/share/man/man7/securelevel.7 +++ b/share/man/man7/securelevel.7 @@ -1,4 +1,4 @@ -.\" $OpenBSD: securelevel.7,v 1.31 2019/08/21 20:44:09 cheloha Exp $ +.\" $OpenBSD: securelevel.7,v 1.32 2025/04/29 17:44:00 jmc Exp $ .\" .\" Copyright (c) 2000 Hugh Graham .\" @@ -23,7 +23,7 @@ .\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: August 21 2019 $ +.Dd $Mdocdate: April 29 2025 $ .Dt SECURELEVEL 7 .Os .Sh NAME @@ -73,7 +73,6 @@ raw disk devices of mounted file systems are read-only system immutable and append-only file flags may not be removed .It the -.Va fs.posix.setuid , .Va hw.allowpowerdown , .Va kern.allowkmem , .Va kern.utc_offset ,