Date: Wed, 20 Mar 2002 08:03:42 -0800 (PST) From: "Andrew R. Reiter" <arr@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_linker.c vfs_syscalls.c Message-ID: <200203201603.g2KG3gB89813@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
arr 2002/03/20 08:03:42 PST
Modified files:
sys/kern kern_linker.c vfs_syscalls.c
Log:
- Change a check of securelevel to securelevel_gt() call in order to help
against users within a jail attempting to load kernel modules.
- Add a check of securelevel_gt() to vfs_mount() in order to chop some
low hanging fruit for the repair of securelevel checking of linking and
unlinking files from within jails. There is more to be done here.
Reviewed by: rwatson
Revision Changes Path
1.82 +10 -6 src/sys/kern/kern_linker.c
1.235 +5 -0 src/sys/kern/vfs_syscalls.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200203201603.g2KG3gB89813>