Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 May 2007 14:34:36 GMT
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 120668 for review
Message-ID:  <200705311434.l4VEYaIL028846@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=120668

Change 120668 by rwatson@rwatson_zoo on 2007/05/31 14:34:33

	Don't allow raw IPv6 sockets in jail.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/netinet6/raw_ip6.c#4 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/netinet6/raw_ip6.c#4 (text+ko) ====

@@ -352,7 +352,7 @@
 	INP_LOCK(in6p);
 
 	priv = 0;
-	if (suser_cred(so->so_cred, SUSER_ALLOWJAIL) == 0)
+	if (suser_cred(so->so_cred, 0) == 0)
 		priv = 1;
 	dst = &dstsock->sin6_addr;
 	if (control) {



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200705311434.l4VEYaIL028846>