o Change a suser() call to a suser_xxx(..., PRISON_ROOT) call in the

linuxulator so as to allow privileged processes within a jail() to
  invoke the Linux initgroups() system call.  This allows the Linux
  "su" to work properly (better) when running a complete Linux
  environment under jail().  This problem was reported by Attila
  Nagy <bra@fsn.hu>.

Reviewed by:	marcel
This commit is contained in:
rwatson 2001-04-24 19:08:53 +00:00
parent a5bda886a9
commit d674030258

View File

@ -970,7 +970,7 @@ linux_setgroups(p, uap)
* Keep cr_groups[0] unchanged to prevent that.
*/
if ((error = suser(p)) != 0)
if ((error = suser_xxx(NULL, p, PRISON_ROOT)) != 0)
return (error);
if (ngrp >= NGROUPS)