diff options
| author | stacktic <stacktic@NetBSD.org> | 2009-11-18 09:47:18 +0000 |
|---|---|---|
| committer | stacktic <stacktic@NetBSD.org> | 2009-11-18 09:47:18 +0000 |
| commit | c461e1153725a37c445b215f33b505ff14afb5ce (patch) | |
| tree | e5cbf72cf056574970a90eb280381c8cfbdc2ebe /sys/secmodel | |
| parent | 1049d3d65137ea89faecb2344e63d202e9ddbaa4 (diff) | |
Fixed security.models.suser.curtain to deny when uid does not match.
OK pooka@
Diffstat (limited to 'sys/secmodel')
| -rw-r--r-- | sys/secmodel/suser/secmodel_suser.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/secmodel/suser/secmodel_suser.c b/sys/secmodel/suser/secmodel_suser.c index 3ee65b88815..6a52815f880 100644 --- a/sys/secmodel/suser/secmodel_suser.c +++ b/sys/secmodel/suser/secmodel_suser.c @@ -1,4 +1,4 @@ -/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */ +/* $NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $ */ /*- * Copyright (c) 2006 Elad Efrat <elad@NetBSD.org> * All rights reserved. @@ -38,7 +38,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $"); +__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $"); #include <sys/types.h> #include <sys/param.h> @@ -537,7 +537,7 @@ secmodel_suser_process_cb(kauth_cred_t cred, kauth_action_t action, } if (secmodel_suser_curtain) { - if (kauth_cred_uidmatch(cred, p->p_cred) != 0) + if (!kauth_cred_uidmatch(cred, p->p_cred)) result = KAUTH_RESULT_DENY; } |
