o Disable flagging of ASU in suser_xxx() authorization check. For the
time being, the ASU accounting flag will no longer be available, but may be reinstituted in the future once authorization have been redone. As it is, the kernel went through contortions in access control to avoid calling suser, which always set the flag. This will also allow suser to accept const struct *{cred, proc} arguments. Reviewed by: bde, green, phk, freebsd-security, others Approved by: bde Obtained from: TrustedBSD Project
This commit is contained in:
parent
4216ea085f
commit
496b1356ff
@ -968,8 +968,6 @@ suser_xxx(cred, proc, flag)
|
||||
return (EPERM);
|
||||
if (proc && proc->p_prison && !(flag & PRISON_ROOT))
|
||||
return (EPERM);
|
||||
if (proc)
|
||||
proc->p_acflag |= ASU;
|
||||
return (0);
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user