Do allow bypass of mac_seeotheruids in jail in order to be consistent
with other uses of PRIV_SEEOTHERUIDS. This will automatically be scoped to the jail by the jail policy.
This commit is contained in:
parent
ea04d82da8
commit
8bd5639f18
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=166830
@ -126,7 +126,8 @@ mac_seeotheruids_check(struct ucred *u1, struct ucred *u2)
|
||||
return (0);
|
||||
|
||||
if (suser_privileged) {
|
||||
if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, 0) == 0)
|
||||
if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, SUSER_ALLOWJAIL)
|
||||
== 0)
|
||||
return (0);
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user