Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Feb 2007 14:36:24 GMT
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 114559 for review
Message-ID:  <200702151436.l1FEaOaW076928@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=114559

Change 114559 by rwatson@rwatson_cinnamon on 2007/02/15 14:36:10

	Make privilege check for audit privileves in jail match what is
	being done elsewhere: for now, no audit in jail.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/kern/kern_jail.c#15 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/kern/kern_jail.c#15 (text+ko) ====

@@ -542,6 +542,7 @@
 		 */
 	case PRIV_KTRACE:
 
+#if 0
 		/*
 		 * Allow jailed processes to configure audit identity and
 		 * submit audit records (login, etc).  In the future we may
@@ -551,6 +552,7 @@
 	case PRIV_AUDIT_GETAUDIT:
 	case PRIV_AUDIT_SETAUDIT:
 	case PRIV_AUDIT_SUBMIT:
+#endif
 
 		/*
 		 * Allow jailed processes to manipulate process UNIX



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200702151436.l1FEaOaW076928>