d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

o Modify device open access control for /dev/mem and friends to use

Browse Source 
securelevel_gt() instead of direct securelevel variable checks.

Obtained from:	TrustedBSD Project
This commit is contained in:
rwatson 2001-09-26 20:08:02 +00:00
parent 823d828036
commit 955613d62b
2 changed files with 16 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
sys/amd64/amd64/mem.c
View File

@ -115,15 +115,19 @@ mmopen(dev_t dev, int flags, int fmt, struct thread *td)
switch (minor(dev)) {
case 0:
case 1:
if ((flags & FWRITE) && securelevel > 0)
return (EPERM);
if (flags & FWRITE) {
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
}
break;
case 14:
error = suser_td(td);
if (error != 0)
return (error);
if (securelevel > 0)
return (EPERM);
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
td->td_frame->tf_eflags |= PSL_IOPL;
break;
}

12
sys/i386/i386/mem.c
View File

@ -115,15 +115,19 @@ mmopen(dev_t dev, int flags, int fmt, struct thread *td)
switch (minor(dev)) {
case 0:
case 1:
if ((flags & FWRITE) && securelevel > 0)
return (EPERM);
if (flags & FWRITE) {
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
}
break;
case 14:
error = suser_td(td);
if (error != 0)
return (error);
if (securelevel > 0)
return (EPERM);
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
td->td_frame->tf_eflags |= PSL_IOPL;
break;
}