Date: Wed, 30 May 2007 14:04:46 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 120629 for review Message-ID: <200705301404.l4UE4kZ6002784@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=120629 Change 120629 by rwatson@rwatson_zoo on 2007/05/30 14:04:10 Re-add missing setaudit() MAC check. Affected files ... .. //depot/projects/trustedbsd/audit3/sys/security/audit/audit_syscalls.c#41 edit Differences ... ==== //depot/projects/trustedbsd/audit3/sys/security/audit/audit_syscalls.c#41 (text+ko) ==== @@ -480,6 +480,11 @@ PROC_LOCK(td->td_proc); oldcred = td->td_proc->p_ucred; crcopy(newcred, oldcred); +#ifdef MAC + error = mac_check_proc_setauid(oldcred, id); + if (error) + goto fail; +#endif error = priv_check_cred(oldcred, PRIV_AUDIT_SETAUDIT, 0); if (error) goto fail;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200705301404.l4UE4kZ6002784>