From owner-freebsd-security  Tue Sep 25  0: 7: 7 2001
Delivered-To: freebsd-security@freebsd.org
Received: from elvis.mu.org (elvis.mu.org [216.33.66.196])
	by hub.freebsd.org (Postfix) with ESMTP
	id 11E6F37B431; Tue, 25 Sep 2001 00:07:02 -0700 (PDT)
Received: by elvis.mu.org (Postfix, from userid 1192)
	id EA1BA81D05; Tue, 25 Sep 2001 02:07:01 -0500 (CDT)
Date: Tue, 25 Sep 2001 02:07:01 -0500
From: Alfred Perlstein <bright@mu.org>
To: alpha@freebsd.org
Cc: security@freebsd.org
Subject: bogon in 4.x memory device
Message-ID: <20010925020701.X97903@elvis.mu.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

without this top(1) fails on machines with raised securelevel.

can anyone review/comment?

Reported by: brian j. peterson <rbw@myplace.org> 

Index: mem.c
===================================================================
RCS file: /home/ncvs/src/sys/alpha/alpha/mem.c,v
retrieving revision 1.19.2.3
diff -u -r1.19.2.3 mem.c
--- mem.c	2000/05/14 00:29:44	1.19.2.3
+++ mem.c	2001/09/25 06:55:30
@@ -138,7 +138,7 @@
 	switch (minor(dev)) {
 	case 0:
 	case 1:
-		if (securelevel >= 1)
+		if ((flags & FWRITE) && securelevel > 0)
 			return (EPERM);
 		break;
 	case 32:


-- 
-Alfred Perlstein [alfred@freebsd.org]
'Instead of asking why a piece of software is using "1970s technology,"
start asking why software is ignoring 30 years of accumulated wisdom.'

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message