Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use KAUTH_PROCESS_CORENAME instead of checking securelevel.

Browse Source
This commit is contained in:
elad 2006-10-10 10:02:34 +00:00
parent f5209007e9
commit 5d97bceb4a
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/kern/kern_resource.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: kern_resource.c,v 1.105 2006/09/13 10:07:42 elad Exp $ */
/* $NetBSD: kern_resource.c,v 1.106 2006/10/10 10:02:34 elad Exp $ */
/*-
* Copyright (c) 1982, 1986, 1991, 1993
@ -37,7 +37,7 @@
*/
#include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: kern_resource.c,v 1.105 2006/09/13 10:07:42 elad Exp $");
__KERNEL_RCSID(0, "$NetBSD: kern_resource.c,v 1.106 2006/10/10 10:02:34 elad Exp $");
#include <sys/param.h>
#include <sys/systm.h>
@ -659,7 +659,8 @@ sysctl_proc_corename(SYSCTLFN_ARGS)
goto done;
}
if (securelevel > 1)
if (kauth_authorize_process(l->l_cred, KAUTH_PROCESS_CORENAME,
l->l_proc, NULL, NULL, NULL) != 0)
return (EPERM);
/*