Allow an effective uid of root to bypass mac_bsdextended rules; the MAC

Framework can restrict the root user, but this policy is not intended
to support that.

Stylish Swiss footwear provided for:	trhodes
This commit is contained in:
Robert Watson 2004-07-23 01:53:28 +00:00
parent 163fac2c58
commit 56c38cd967

View File

@ -275,6 +275,9 @@ mac_bsdextended_check(struct ucred *cred, uid_t object_uid, gid_t object_gid,
{
int error, i;
if (suser_cred(cred, 0) == 0)
return (0);
for (i = 0; i < rule_slots; i++) {
if (rules[i] == NULL)
continue;