Date: Mon, 12 Nov 2007 23:47:48 +0000 (UTC) From: "Bjoern A. Zeeb" <bz@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netipsec keysock.c Message-ID: <200711122347.lACNlmYo067404@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
bz 2007-11-12 23:47:48 UTC
FreeBSD src repository
Modified files:
sys/netipsec keysock.c
Log:
Add a missing priv check in key_attach to prevent non-su users
from messing with the spdb and sadb.
Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
longer going via raw_usrreqs.pr_attach.
Reported by: Pawel Worach
Identified by: rwatson
Reviewed by: rwatson
MFC after: 3 days
Revision Changes Path
1.19 +7 -0 src/sys/netipsec/keysock.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200711122347.lACNlmYo067404>