Date: Thu, 2 Sep 2004 01:12:20 +0000 (UTC) From: "Christian S.J. Peron" <csjp@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/ufs/ufs ufs_vnops.c Message-ID: <200409020112.i821CKfE030328@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
csjp 2004-09-02 01:12:20 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_5)
sys/ufs/ufs ufs_vnops.c
Log:
MFC v1.243:
Currently, if the secure level is low enough, system flags can
be manipulated by prison root. In 4.x prison root can not manipulate
system flags, regardless of the security level. This behavior
should remain consistent to avoid any surprises which could lead
to security problems for system administrators which give out
privileged access to jails.
This commit changes suser_cred's flag argument from SUSER_ALLOWJAIL
to 0. This will prevent prison root from being able to manipulate
system flags on files.
Approved by: re (kensmith)
Revision Changes Path
1.242.2.1 +1 -1 src/sys/ufs/ufs/ufs_vnops.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200409020112.i821CKfE030328>