o Change a suser() call to a suser_xxx(..., PRISON_ROOT) call in the
linuxulator so as to allow privileged processes within a jail() to invoke the Linux initgroups() system call. This allows the Linux "su" to work properly (better) when running a complete Linux environment under jail(). This problem was reported by Attila Nagy <bra@fsn.hu>. Reviewed by: marcel
This commit is contained in:
parent
a5bda886a9
commit
d674030258
@ -970,7 +970,7 @@ linux_setgroups(p, uap)
|
||||
* Keep cr_groups[0] unchanged to prevent that.
|
||||
*/
|
||||
|
||||
if ((error = suser(p)) != 0)
|
||||
if ((error = suser_xxx(NULL, p, PRISON_ROOT)) != 0)
|
||||
return (error);
|
||||
|
||||
if (ngrp >= NGROUPS)
|
||||
|
Loading…
Reference in New Issue
Block a user