d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Do allow jailed superuser to override the port ACL.

Browse Source 
MFC after:	3 days
Submitted by:	Michal Mertl <mime at traveller dot cz>
This commit is contained in:
Robert Watson 2006-10-10 17:04:19 +00:00
parent 06399e90bc
commit d7dd2bd6ed
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=163208
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/security/mac_portacl/mac_portacl.c
View File

@ -427,7 +427,7 @@ rules_check(struct ucred *cred, int family, int type, u_int16_t port)
mtx_unlock(&rule_mtx);
if (error != 0 && mac_portacl_suser_exempt != 0)
error = suser_cred(cred, 0);
error = suser_cred(cred, SUSER_ALLOWJAIL);
return (error);
}