d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

o Modify ufs_setattr() so that it uses securelevel_gt() instead of

Browse Source 
direct variable access.

Obtained from:	TrustedBSD Project
This commit is contained in:
Robert Watson 2001-09-26 20:31:37 +00:00
parent 8c5d4fe829
commit 6748bcc51e
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sys/ufs/ufs/ufs_vnops.c
View File

@ -488,10 +488,12 @@ ufs_setattr(ap)
* if securelevel > 0 and any existing system flags are set.
*/
if (!suser_xxx(cred, NULL, 0)) {
if ((ip->i_flags
& (SF_NOUNLINK | SF_IMMUTABLE | SF_APPEND)) &&
securelevel > 0)
return (EPERM);
if (ip->i_flags
& (SF_NOUNLINK | SF_IMMUTABLE | SF_APPEND)) {
error = securelevel_gt(cred, 0);
if (error)
return (error);
}
/* Snapshot flag cannot be set or cleared */
if (((vap->va_flags & SF_SNAPSHOT) != 0 &&
(ip->i_flags & SF_SNAPSHOT) == 0) ||