From f488d5b79787e06a5c82acde518a289907ba395c Mon Sep 17 00:00:00 2001 From: Mariusz Zaborski Date: Wed, 18 Nov 2020 21:26:14 +0000 Subject: [PATCH] Add CTLFLAG_MPSAFE to the suser_enabled sysctl. Pointed out by: mjg --- sys/kern/kern_priv.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sys/kern/kern_priv.c b/sys/kern/kern_priv.c index 36e19170baad..b621de58f685 100644 --- a/sys/kern/kern_priv.c +++ b/sys/kern/kern_priv.c @@ -107,8 +107,8 @@ sysctl_kern_suser_enabled(SYSCTL_HANDLER_ARGS) } SYSCTL_PROC(_security_bsd, OID_AUTO, suser_enabled, CTLTYPE_INT | - CTLFLAG_RWTUN | CTLFLAG_PRISON, 0, 0, &sysctl_kern_suser_enabled, "I", - "Processes with uid 0 have privilege"); + CTLFLAG_RWTUN | CTLFLAG_PRISON | CTLFLAG_MPSAFE, 0, 0, + &sysctl_kern_suser_enabled, "I", "Processes with uid 0 have privilege"); static int unprivileged_mlock = 1; SYSCTL_INT(_security_bsd, OID_AUTO, unprivileged_mlock, CTLFLAG_RWTUN,