Disable chflags() from within jail() so that root within jail can't make
a mess in securelevel environments. Results in one warning during /etc/rc as it attempts to remove file flags, but this is harmless. Approved by: High Lord Hubbard
This commit is contained in:
parent
da8a39382b
commit
41ecf3565f
@ -444,7 +444,7 @@ ufs_setattr(ap)
|
||||
if (vp->v_mount->mnt_flag & MNT_RDONLY)
|
||||
return (EROFS);
|
||||
if (cred->cr_uid != ip->i_uid &&
|
||||
(error = suser_xxx(cred, p, PRISON_ROOT)))
|
||||
(error = suser(p)))
|
||||
return (error);
|
||||
if (cred->cr_uid == 0) {
|
||||
if ((ip->i_flags
|
||||
|
Loading…
x
Reference in New Issue
Block a user