o Disable flagging of ASU in suser_xxx() authorization check. For the

time being, the ASU accounting flag will no longer be available, but
  may be reinstituted in the future once authorization have been redone.
  As it is, the kernel went through contortions in access control to
  avoid calling suser, which always set the flag.  This will also allow
  suser to accept const struct *{cred, proc} arguments.

Reviewed by:	bde, green, phk, freebsd-security, others
Approved by:	bde
Obtained from:	TrustedBSD Project

sys/kern/kern_prot.c

@@ -968,8 +968,6 @@ suser_xxx(cred, proc, flag)
 		return (EPERM);
 	if (proc && proc->p_prison && !(flag & PRISON_ROOT))
 		return (EPERM);
-	if (proc)
-		proc->p_acflag |= ASU;
 	return (0);
 }