Continue pre-7.0 privilege cleanup: update suser(9) comments to be priv(9)
comments. Approved by: re (bmah)
This commit is contained in:
parent
bc6eca2432
commit
02dd4b5cbd
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=171157
@ -716,8 +716,8 @@ pppsioctl(ifp, cmd, data)
|
||||
|
||||
case SIOCSIFMTU:
|
||||
/*
|
||||
* XXXRW: Isn't this suser() check redundant to the one at the ifnet
|
||||
* layer?
|
||||
* XXXRW: Isn't this priv_check() check redundant to the one at the
|
||||
* ifnet layer?
|
||||
*/
|
||||
error = priv_check(td, PRIV_NET_SETIFMTU);
|
||||
if (error)
|
||||
|
@ -349,7 +349,7 @@ rip_output(struct mbuf *m, struct socket *so, u_long dst)
|
||||
* after it gives up privilege, so some caution is required. For options
|
||||
* passed down to the IP layer via ip_ctloutput(), checks are assumed to be
|
||||
* performed in ip_ctloutput() and therefore no check occurs here.
|
||||
* Unilaterally checking suser() here breaks normal IP socket option
|
||||
* Unilaterally checking priv_check() here breaks normal IP socket option
|
||||
* operations on raw sockets.
|
||||
*
|
||||
* When adding new socket options here, make sure to add access control
|
||||
|
Loading…
Reference in New Issue
Block a user