d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Do allow bypass of mac_seeotheruids in jail in order to be consistent

Browse Source 
with other uses of PRIV_SEEOTHERUIDS.  This will automatically be
scoped to the jail by the jail policy.
This commit is contained in:
Robert Watson 2007-02-19 13:25:17 +00:00
parent ea04d82da8
commit 8bd5639f18
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/security/mac_seeotheruids/mac_seeotheruids.c
View File

@ -126,7 +126,8 @@ mac_seeotheruids_check(struct ucred *u1, struct ucred *u2)
return (0);
if (suser_privileged) {
if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, 0) == 0)
if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, SUSER_ALLOWJAIL)
== 0)
return (0);
}