d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
66d5c640fa
freebsd-nq/sys
History
Colin Percival 66d5c640fa In revision 1.228, I accidentally broke the "total number of processes in 
the system" resource limit code: When checking if the caller has superuser
privileges, we should be checking the *real* user, not the *effective*
user.  (In general, resource limiting is done based on the real user, in
order to avoid resource-exhaustion-by-setuid-program attacks.)

Now that a SUSER_RUID flag to suser_cred exists, use it here to return
this code to its correct behaviour.

Pointed out by:	rwatson
2004-07-26 07:54:39 +00:00
..
alpha Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
amd64 Remove ahb, aha, ie, le and wl devices. They are all ISA/EISA only. 2004-07-22 22:29:45 +00:00
arm MFi386 revision 1.421 2004-07-22 23:04:41 +00:00
boot o Support the REL32LSB relocation. It's in the ELF file from which 2004-07-20 07:11:14 +00:00
cam Quirk for SEGRAND NP-900 USB MP3Player 2004-07-18 05:39:14 +00:00
coda Do a pass over all modules in the kernel and make them return EOPNOTSUPP 2004-07-15 08:26:07 +00:00
compat Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
conf Reinforce discouragement of the use of FULL_PREEMPTION. 2004-07-23 17:44:07 +00:00
contrib Fix the following LOR on pf module unload: 2004-07-23 03:37:05 +00:00
crypto Use __FBSDID(). 2004-06-14 00:38:54 +00:00
ddb Oops... Add the CS_OWN flag to the trace and where commands so that 2004-07-21 05:55:51 +00:00
dev Don't force an immediate probe/attach for all devices when compiled with 2004-07-26 06:04:35 +00:00
doc Experimental support for using doxygen to generate kernel documentation. 2004-07-11 16:13:57 +00:00
fs Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
gdb Introduce the GDB debugger backend for the new KDB framework. The 2004-07-10 17:47:22 +00:00
geom Save the vinum config back to disk after syncing two plexes. 2004-07-26 07:30:21 +00:00
gnu Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
i4b Fix a possible hang which apparently occurs during a warm boot (cold boot 2004-07-18 20:13:31 +00:00
i386 Get the acpi softc via the devclass, not by caching the device. Replace 2004-07-24 22:41:30 +00:00
ia64 Work-around a gcc code generation bug for function descriptors 2004-07-25 07:07:09 +00:00
isa Ignore more strange return values of the test_aux_port() function, 2004-07-16 22:04:29 +00:00
isofs/cd9660 Make VFS_ROOT() and vflush() take a thread argument. 2004-07-12 08:14:09 +00:00
kern In revision 1.228, I accidentally broke the "total number of processes in 2004-07-26 07:54:39 +00:00
libkern Copy qsort_r(3) from libc to libkern. 2004-07-15 23:58:23 +00:00
modules Add the ACPI Panasonic extras driver. 2004-07-21 14:47:54 +00:00
net Prefer NULL to '0' when checking a pointer value. 2004-07-24 16:58:56 +00:00
net80211 Link ALTQ to the build and break with ABI for struct ifnet. Please recompile 2004-06-13 17:29:10 +00:00
netatalk Further function forward declaration white space tweaks. 2004-07-19 17:18:58 +00:00
netatm Fix a typo that could provoke a panic or access to random memory. 2004-07-19 12:54:00 +00:00
netgraph Slight cosmetic changes. 2004-07-20 17:15:38 +00:00
netinet Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
netinet6 Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
netipsec Add required includes for post-sorwakeup() change to fix FAST_IPSEC 2004-06-23 01:58:22 +00:00
netipx Constify 'spx_backoff'. 2004-07-12 19:35:29 +00:00
netkey Merge next step in socket buffer locking: 2004-06-21 00:20:43 +00:00
netnatm Constify send and receive space constants in natm. 2004-06-24 03:11:29 +00:00
netncp Do the dreaded s/dev_t/struct cdev */ 2004-06-16 09:47:26 +00:00
netsmb Merge additional socket buffer locking from rwatson_netperf: 2004-06-17 22:48:11 +00:00
nfs
nfs4client Eliminate unused second argument to reassignbuf() and simplify it 2004-07-25 21:24:23 +00:00
nfsclient Eliminate unused second argument to reassignbuf() and simplify it 2004-07-25 21:24:23 +00:00
nfsserver If debug.mpsafenet is non-zero, run the NFS server callout without 2004-07-24 02:32:27 +00:00
opencrypto Push acquisition of Giant from fdrop_closed() into fo_close() so that 2004-07-22 18:35:43 +00:00
pc98 Merged from sys/dev/sio/sio.c revision 1.450. 2004-07-24 15:13:42 +00:00
pccard Do the dreaded s/dev_t/struct cdev */ 2004-06-16 09:47:26 +00:00
pci Update for the KDB framework: 2004-07-10 21:47:53 +00:00
posix4
powerpc Let ddb know powerpc is big endian so as to make ddb output 2004-07-23 14:45:15 +00:00
rpc fix array index out of bounds in rpc->rc_srtt[], rpc->rc_sdrtt[] 2004-07-15 22:21:25 +00:00
security Allow an effective uid of root to bypass mac_bsdextended rules; the MAC 2004-07-23 01:53:28 +00:00
sparc64 Use kmem_alloc_nofault() rather than kmem_alloc_pageable() for allocating 2004-07-23 06:49:49 +00:00
sys Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
tools Pass doxygen doc comments through to the output. 2004-07-11 16:14:24 +00:00
ufs Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is 2004-07-26 07:24:04 +00:00
vm For years, kmem_alloc_pageable() has been misused. Now that the last of 2004-07-25 20:08:59 +00:00
Makefile Try harder not to compile anything in sys/boot for arm. 2004-05-16 00:19:12 +00:00