d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

o Add a comment clarifying interaction between jail(), privileged processes,

Browse Source 
and UFS file flags.  Here's what the comment says, for reference:

	Privileged processes in jail() are permitted to modify
	arbitrary user flags on files, but are not permitted
	to modify system flags.

  In other words, privilege does allow a process in jail to modify user
  flags for objects that the process does not own, but privilege will
  not permit the setting of system flags on the file.

Obtained from:	TrustedBSD Project
This commit is contained in:
Robert Watson 2000-09-18 17:58:15 +00:00
parent ea57890740
commit f5770bb46a
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=66039
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/ufs/ufs/ufs_vnops.c
View File

@ -408,6 +408,11 @@ ufs_setattr(ap)
if (vap->va_flags != VNOVAL) {
if (vp->v_mount->mnt_flag & MNT_RDONLY)
return (EROFS);
/*
* Privileged processes in jail() are permitted to modify
* arbitrary user flags on files, but are not permitted
* to modify system flags.
*/
if (cred->cr_uid != ip->i_uid &&
(error = suser_xxx(cred, p, PRISON_ROOT)))
return (error);