Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
PROCCONTROL(1)		    General Commands Manual		PROCCONTROL(1)

NAME
       proccontrol -- Control some process execution aspects

SYNOPSIS
       proccontrol -m mode [-s control]	[-q] -p	pid | command

DESCRIPTION
       The  proccontrol	 command  modifies the execution parameter of existing
       process specified by the	pid argument, or starts	execution of  the  new
       program command with the	execution parameter set	for it.

       Which execution parameter is changed, selected by the mandatory parame-
       ter mode.  Possible values for mode are:

       aslr	Control	the Address Space Layout Randomization.	 Only applica-
		ble to the new process spawned.

       trace	Control	 the  permission  for  debuggers to attach.  Note that
		process	is only	allowed	to enable tracing for itself, not  for
		any other process.

       trapcap	Controls the signalling	of capability mode access violations.

       protmax	Controls the implicit PROT_MAX application for mmap(2).

       nonewprivs
		Controls disabling the setuid and sgid bits for	execve(2).

       wxmap	Controls the write exclusive execute mode for mappings.

       kpti	Controls the KPTI enable, AMD64	only.

       la48	Control	 limiting usermode process address space to 48 bits of
		address, AMD64 only, on	machines capable of 57-bit addressing.

       The control specifies if	the selected mode should be  enabled  or  dis-
       abled.	Possible values	are enable and disable,	with the default value
       being enable if not specified.  See procctl(2) for detailed description
       of each mode effects and	interaction with other process control facili-
       ties.

       The -q switch makes the utility query and print the current setting for
       the selected mode.  The -q requires the query target process specifica-
       tion with -p.

EXIT STATUS
       The proccontrol utility exits 0 on success, and >0 if an	error occurs.

EXAMPLES
          To disable debuggers	attachment to the process 1020,	execute
		 proccontrol -m	trace -s disable -p 1020

          To execute the uniq(1) program in a mode  where  capability	access
	   violations cause SIGTRAP delivery, do
		 proccontrol -m	trapcap	uniq

          To  query  the current ASLR enablement mode for the running process
	   1020, do
		 proccontrol -m	aslr -q	-p 1020

SEE ALSO
       kill(2),	procctl(2), ptrace(2), mitigations(7)

HISTORY
       The proccontrol command appeared	in FreeBSD 10.0.

AUTHORS
       The proccontrol command and this	manual page were written by Konstantin
       Belousov	<kib@freebsd.org> under	sponsorship from The  FreeBSD  Founda-
       tion.

FreeBSD	14.3			October	5, 2023			PROCCONTROL(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=proccontrol&sektion=1&manpath=FreeBSD+14.3-RELEASE+and+Ports>

home | help