Do allow jailed superuser to override the port ACL.
MFC after: 3 days Submitted by: Michal Mertl <mime at traveller dot cz>
This commit is contained in:
parent
06399e90bc
commit
d7dd2bd6ed
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=163208
@ -427,7 +427,7 @@ rules_check(struct ucred *cred, int family, int type, u_int16_t port)
|
||||
mtx_unlock(&rule_mtx);
|
||||
|
||||
if (error != 0 && mac_portacl_suser_exempt != 0)
|
||||
error = suser_cred(cred, 0);
|
||||
error = suser_cred(cred, SUSER_ALLOWJAIL);
|
||||
|
||||
return (error);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user