d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

For now, reflect practical reality that Audit system calls aren't

Browse Source 
allowed in Jail: return a privilege error.
This commit is contained in:
Robert Watson 2007-02-19 13:10:29 +00:00
parent 969e5bdcd0
commit c3c1b5e62a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/kern/kern_jail.c
View File

@ -542,6 +542,7 @@ prison_priv_check(struct ucred *cred, int priv)
*/
case PRIV_KTRACE:
#if 0
/*
* Allow jailed processes to configure audit identity and
* submit audit records (login, etc). In the future we may
@ -551,6 +552,7 @@ prison_priv_check(struct ucred *cred, int priv)
case PRIV_AUDIT_GETAUDIT:
case PRIV_AUDIT_SETAUDIT:
case PRIV_AUDIT_SUBMIT:
#endif
/*
* Allow jailed processes to manipulate process UNIX