Make it clear that only KAUTH_MACHDEP_SVS_DISABLE is deprecated.

This commit is contained in:
alnsn 2020-05-16 19:12:38 +00:00
parent 985ba7a358
commit 44b6dca6ae

View File

@ -1,4 +1,4 @@
/* $NetBSD: secmodel_suser.c,v 1.53 2020/05/11 19:36:40 alnsn Exp $ */
/* $NetBSD: secmodel_suser.c,v 1.54 2020/05/16 19:12:38 alnsn Exp $ */
/*-
* Copyright (c) 2006 Elad Efrat <elad@NetBSD.org>
* All rights reserved.
@ -38,7 +38,7 @@
*/
#include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.53 2020/05/11 19:36:40 alnsn Exp $");
__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.54 2020/05/16 19:12:38 alnsn Exp $");
#include <sys/types.h>
#include <sys/param.h>
@ -846,6 +846,10 @@ secmodel_suser_machdep_cb(kauth_cred_t cred, kauth_action_t action,
case KAUTH_MACHDEP_NVRAM:
case KAUTH_MACHDEP_UNMANAGEDMEM:
case KAUTH_MACHDEP_PXG:
if (isroot)
result = KAUTH_RESULT_ALLOW;
break;
case KAUTH_MACHDEP_SVS_DISABLE:
/* Deprecated. */
if (isroot)