From a8948665118114009e021046f9cc74f3577b916d Mon Sep 17 00:00:00 2001
From: elad <elad@NetBSD.org>
Date: Sun, 11 Sep 2005 20:15:53 +0000
Subject: [PATCH] Implement curtain for procfs.

---
 sys/miscfs/procfs/procfs_vnops.c | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/sys/miscfs/procfs/procfs_vnops.c b/sys/miscfs/procfs/procfs_vnops.c
index 96e00a8cc582..cfe0e3e4f376 100644
--- a/sys/miscfs/procfs/procfs_vnops.c
+++ b/sys/miscfs/procfs/procfs_vnops.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: procfs_vnops.c,v 1.124 2005/08/30 20:08:01 xtraeme Exp $	*/
+/*	$NetBSD: procfs_vnops.c,v 1.125 2005/09/11 20:15:53 elad Exp $	*/
 
 /*
  * Copyright (c) 1993, 1995
@@ -76,7 +76,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: procfs_vnops.c,v 1.124 2005/08/30 20:08:01 xtraeme Exp $");
+__KERNEL_RCSID(0, "$NetBSD: procfs_vnops.c,v 1.125 2005/09/11 20:15:53 elad Exp $");
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -93,6 +93,7 @@ __KERNEL_RCSID(0, "$NetBSD: procfs_vnops.c,v 1.124 2005/08/30 20:08:01 xtraeme E
 #include <sys/resourcevar.h>
 #include <sys/stat.h>
 #include <sys/ptrace.h>
+#include <sys/sysctl.h> /* XXX for curtain */
 
 #include <uvm/uvm_extern.h>	/* for PAGE_SIZE */
 
@@ -525,6 +526,12 @@ procfs_getattr(v)
 		break;
 	}
 
+	if (procp != NULL) {
+		if (CURTAIN(curlwp->l_proc->p_ucred->cr_uid,
+			    procp->p_ucred->cr_uid))
+			return (ENOENT);
+	}
+
 	error = 0;
 
 	/* start by zeroing out the attributes */
@@ -1028,6 +1035,9 @@ procfs_root_readdir_callback(struct proc *p, void *arg)
 		return 0;
 	}
 
+	if (CURTAIN(curlwp->l_proc->p_ucred->cr_uid, p->p_ucred->cr_uid))
+		return (0);
+
 	memset(&d, 0, UIO_MX);
 	d.d_reclen = UIO_MX;
 	d.d_fileno = PROCFS_FILENO(p->p_pid, PFSproc, -1);
@@ -1153,6 +1163,10 @@ procfs_readdir(v)
 		if (p == NULL)
 			return ESRCH;
 
+		if (CURTAIN(curlwp->l_proc->p_ucred->cr_uid,
+			    p->p_ucred->cr_uid))
+			return (ESRCH);
+
 		fdp = p->p_fd;
 
 		lim = min((int)p->p_rlimit[RLIMIT_NOFILE].rlim_cur, maxfiles);