Date: Wed, 14 Nov 2007 11:52:44 +0000 (UTC) From: "Bjoern A. Zeeb" <bz@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netipsec keysock.c Message-ID: <200711141152.lAEBqjCN057090@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
bz 2007-11-14 11:52:44 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_7)
sys/netipsec keysock.c
Log:
MFC: rev 1.19 sys/netipsec/keysock.c
Add a missing priv check in key_attach to prevent non-su users
from messing with the spdb and sadb.
Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
longer going via raw_usrreqs.pr_attach.
Approved by: re (kensmith)
Revision Changes Path
1.18.2.1 +7 -0 src/sys/netipsec/keysock.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200711141152.lAEBqjCN057090>
