Allow an effective uid of root to bypass mac_bsdextended rules; the MAC
Framework can restrict the root user, but this policy is not intended to support that. Stylish Swiss footwear provided for: trhodes
This commit is contained in:
parent
163fac2c58
commit
56c38cd967
@ -275,6 +275,9 @@ mac_bsdextended_check(struct ucred *cred, uid_t object_uid, gid_t object_gid,
|
||||
{
|
||||
int error, i;
|
||||
|
||||
if (suser_cred(cred, 0) == 0)
|
||||
return (0);
|
||||
|
||||
for (i = 0; i < rule_slots; i++) {
|
||||
if (rules[i] == NULL)
|
||||
continue;
|
||||
|
Loading…
Reference in New Issue
Block a user