From owner-cvs-all@FreeBSD.ORG  Tue Sep 30 16:16:08 2008
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B603F10656A1;
	Tue, 30 Sep 2008 16:16:08 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id A42E78FC17;
	Tue, 30 Sep 2008 16:16:08 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id m8UGG8xo049158;
	Tue, 30 Sep 2008 16:16:08 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id m8UGG8IZ049153;
	Tue, 30 Sep 2008 16:16:08 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Message-Id: <200809301616.m8UGG8IZ049153@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	rwatson@repoman.freebsd.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
Date: Tue, 30 Sep 2008 16:15:46 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: RELENG_6
Cc: 
Subject: cvs commit: src/sys/security/mac_seeotheruids mac_seeotheruids.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Sep 2008 16:16:08 -0000

rwatson     2008-09-30 16:15:46 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_6)
    sys/security/mac_seeotheruids mac_seeotheruids.c 
  Log:
  SVN rev 183501 on 2008-09-30 16:15:46Z by rwatson
  
  Pass SUSER_ALLOWJAIL flag to suser_cred(9) in mac_seeotheruids: allow
  root in jail to see processes in the same jail with other uids.  This
  was previously restricted as the default, but in practice it is fine
  to allow this as the caller implements jail scoping.
  
  Reported by:    George Mamalakis <mamalos at eng.auth.gr>
  Approved by:    re (kensmith, kib)
  
  Revision  Changes    Path
  1.7.2.1   +1 -1      src/sys/security/mac_seeotheruids/mac_seeotheruids.c