Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Feb 2007 14:32:18 GMT
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 114557 for review
Message-ID:  <200702151432.l1FEWInO076258@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=114557

Change 114557 by rwatson@rwatson_cinnamon on 2007/02/15 14:31:43

	Generally, we allow PRIV_SEEOTHERUIDS in jail, so allow it in
	mac_seeotheruids policy also.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/security/mac_seeotheruids/mac_seeotheruids.c#6 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/security/mac_seeotheruids/mac_seeotheruids.c#6 (text+ko) ====

@@ -126,7 +126,8 @@
 		return (0);
 
 	if (suser_privileged) {
-		if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, 0) == 0)
+		if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, SUSER_ALLOWJAIL)
+		    == 0)
 			return (0);
 	}
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200702151432.l1FEWInO076258>