X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/2d21ac55c334faf3a56e5634905ed6987fc787d4..935ed37a5c468c8a1c07408573c08b8b7ef80e8b:/bsd/vm/vm_unix.c

diff --git a/bsd/vm/vm_unix.c b/bsd/vm/vm_unix.c
index 56c2201dc..094b6258c 100644
--- a/bsd/vm/vm_unix.c
+++ b/bsd/vm/vm_unix.c
@@ -93,10 +93,12 @@
  * Sysctl's related to data/stack execution.  See osfmk/vm/vm_map.c
  */
 
+#ifndef SECURE_KERNEL
 extern int allow_stack_exec, allow_data_exec;
 
 SYSCTL_INT(_vm, OID_AUTO, allow_stack_exec, CTLFLAG_RW, &allow_stack_exec, 0, "");
 SYSCTL_INT(_vm, OID_AUTO, allow_data_exec, CTLFLAG_RW, &allow_data_exec, 0, "");
+#endif /* !SECURE_KERNEL */
 
 #if CONFIG_NO_PRINTF_STRINGS
 void
@@ -525,6 +527,7 @@ task_for_pid(
 	if (p->task != TASK_NULL) {
 		/* If we aren't root and target's task access port is set... */
 		if (!kauth_cred_issuser(kauth_cred_get()) &&
+			p != current_proc() &&
 			(task_get_task_access_port(p->task, &tfpport) == 0) &&
 			(tfpport != IPC_PORT_NULL)) {
 
@@ -819,7 +822,7 @@ shared_region_map_np(
 	memory_object_size_t		file_size;
 	user_addr_t			user_mappings;
 	struct shared_file_mapping_np	*mappings;
-#define SFM_MAX_STACK	4
+#define SFM_MAX_STACK	8
 	struct shared_file_mapping_np	stack_mappings[SFM_MAX_STACK];
 	unsigned int			mappings_count;
 	vm_size_t			mappings_size;