Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sync reality with comments. This makes strict level 1 work as expected. 

Reported by Nino Dehne.
This commit is contained in:
elad 2005-06-14 21:55:21 +00:00
parent 6724401235
commit 8863b29522
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
sys/kern/kern_verifiedexec.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: kern_verifiedexec.c,v 1.24 2005/06/13 22:46:56 elad Exp $ */
/* $NetBSD: kern_verifiedexec.c,v 1.25 2005/06/14 21:55:21 elad Exp $ */
/*-
* Copyright 2005 Elad Efrat <elad@bsd.org.il>
@ -30,7 +30,7 @@
*/
#include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: kern_verifiedexec.c,v 1.24 2005/06/13 22:46:56 elad Exp $");
__KERNEL_RCSID(0, "$NetBSD: kern_verifiedexec.c,v 1.25 2005/06/14 21:55:21 elad Exp $");
#include <sys/param.h>
#include <sys/mount.h>
@ -469,9 +469,10 @@ out:
* - File is being accessed, and we're in strict
* level 2.
*/
if ((veriexec_strict > 1) ||
((veriexec_strict == 1) &&
((flag == VERIEXEC_FILE) || (flag == VERIEXEC_INDIRECT))))
if (((veriexec_strict == 1) &&
((flag == VERIEXEC_DIRECT) ||
(flag == VERIEXEC_INDIRECT))) ||
(veriexec_strict > 1))
error = EPERM;
break;