---
name: "proccontrol"
section: "1"
platform: "freebsd"
package: "base"
version: "16.0-CURRENT-20261027-61c70dc16a79"
release: "FreeBSD 16.0-CURRENT (2026-10-27)"
platforms: ["freebsd"]
url: "https://new.carta.tech/proccontrol"
---

# proccontrol(1)

Control some process execution aspects

## NAME

**proccontrol** – Control some process execution aspects

## SYNOPSIS

**proccontrol** **-m** *mode* **-s** *control* **-p** *pid* \| *command*

**proccontrol** **-m** *mode* **-q** \[**-p** *pid* \| *command*\]

## DESCRIPTION

The **proccontrol** command modifies the execution parameter of existing process specified by the *pid* argument, or starts execution of the new program *command* with the execution parameter set for it.

Which execution parameter is changed, selected by the mandatory parameter *mode*. Possible values for *mode* are:

- *aslr*

  Control the Address Space Layout Randomization. Only applicable to the new process spawned.

- *trace*

  Control the permission for debuggers to attach. Note that process is only allowed to enable tracing for itself, not for any other process.

- *trapcap*

  Controls the signalling of capability mode access violations.

- *protmax*

  Controls the implicit PROT\_MAX application for [mmap(2)](/mmap/2.md).

- *nonewprivs*

  Controls disabling the setuid and sgid bits for [execve(2)](/execve/2.md).

- *wxmap*

  Controls the write exclusive execute mode for mappings.

- *kpti*

  Controls the KPTI enable, AMD64 only.

- *la48*

  Control limiting usermode process address space to 48 bits of address, AMD64 only, on machines capable of 57-bit addressing.

- *logsigexit*

  Controls the logging of exits due to a signal that would normally cause a core dump.

The *control* specifies if the selected *mode* should be enabled or disabled. Possible values are *enable* and *disable*, with the default value being *enable* if not specified. See [procctl(2)](/procctl/2.md) for detailed description of each mode effects and interaction with other process control facilities.

The **-q** switch makes the utility query and print the current setting for the selected mode. The **-q** requires the query target process specification with **-p**.

## EXIT STATUS

The **proccontrol** utility exits 0 on success, and \>0 if an error occurs.

## EXAMPLES

- To disable debuggers attachment to the process 1020, execute

  ```
  proccontrol -m trace -s disable -p 1020
  ```

- To execute the [uniq(1)](/uniq/1.md) program in a mode where capability access violations cause SIGTRAP delivery, do

  ```
  proccontrol -m trapcap uniq
  ```

- To query the current ASLR enablement mode for the running process 1020, do

  ```
  proccontrol -m aslr -q -p 1020
  ```

## SEE ALSO

[kill(2)](/kill/2.md), [procctl(2)](/procctl/2.md), [ptrace(2)](/ptrace/2.md), [mitigations(7)](/mitigations/7.md)

## HISTORY

The **proccontrol** command appeared in FreeBSD 10.0.

## AUTHORS

The **proccontrol** command and this manual page were written by Konstantin Belousov ⟨*kib@FreeBSD.org*⟩ under sponsorship from The FreeBSD Foundation.