summaryrefslogtreecommitdiff
path: root/sys/secmodel
diff options
context:
space:
mode:
authorstacktic <stacktic@NetBSD.org>2009-11-18 09:47:18 +0000
committerstacktic <stacktic@NetBSD.org>2009-11-18 09:47:18 +0000
commitc461e1153725a37c445b215f33b505ff14afb5ce (patch)
treee5cbf72cf056574970a90eb280381c8cfbdc2ebe /sys/secmodel
parent1049d3d65137ea89faecb2344e63d202e9ddbaa4 (diff)
Fixed security.models.suser.curtain to deny when uid does not match.
OK pooka@
Diffstat (limited to 'sys/secmodel')
-rw-r--r--sys/secmodel/suser/secmodel_suser.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/secmodel/suser/secmodel_suser.c b/sys/secmodel/suser/secmodel_suser.c
index 3ee65b88815..6a52815f880 100644
--- a/sys/secmodel/suser/secmodel_suser.c
+++ b/sys/secmodel/suser/secmodel_suser.c
@@ -1,4 +1,4 @@
-/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */
+/* $NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $ */
/*-
* Copyright (c) 2006 Elad Efrat <elad@NetBSD.org>
* All rights reserved.
@@ -38,7 +38,7 @@
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $");
#include <sys/types.h>
#include <sys/param.h>
@@ -537,7 +537,7 @@ secmodel_suser_process_cb(kauth_cred_t cred, kauth_action_t action,
}
if (secmodel_suser_curtain) {
- if (kauth_cred_uidmatch(cred, p->p_cred) != 0)
+ if (!kauth_cred_uidmatch(cred, p->p_cred))
result = KAUTH_RESULT_DENY;
}