diff options
Diffstat (limited to 'sys/dev/verified_exec.c')
| -rw-r--r-- | sys/dev/verified_exec.c | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/sys/dev/verified_exec.c b/sys/dev/verified_exec.c index d69de7b2c59..47b7a544f1b 100644 --- a/sys/dev/verified_exec.c +++ b/sys/dev/verified_exec.c @@ -1,4 +1,4 @@ -/* $NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $ */ +/* $NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $ */ /*- * Copyright 2005 Elad Efrat <elad@bsd.org.il> @@ -31,9 +31,9 @@ #include <sys/cdefs.h> #if defined(__NetBSD__) -__KERNEL_RCSID(0, "$NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $"); +__KERNEL_RCSID(0, "$NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $"); #else -__RCSID("$Id: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $\n$NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $"); +__RCSID("$Id: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $\n$NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $"); #endif #include <sys/param.h> @@ -126,10 +126,12 @@ veriexecopen(dev_t dev __unused, int flags __unused, if (veriexec_verbose >= 2) { printf("Veriexec: veriexecopen: Veriexec load device " "open attempt by uid=%u, pid=%u. (dev=%u)\n", - l->l_proc->p_ucred->cr_uid, l->l_proc->p_pid, dev); + kauth_cred_geteuid(l->l_proc->p_cred), + l->l_proc->p_pid, dev); } - if (suser(l->l_proc->p_ucred, &l->l_proc->p_acflag) != 0) + if (kauth_authorize_generic(l->l_proc->p_cred, KAUTH_GENERIC_ISSUSER, + &l->l_proc->p_acflag) != 0) return (EPERM); if (veriexec_dev_usage > 0) { @@ -260,7 +262,7 @@ veriexec_load(struct veriexec_params *params, struct lwp *l) } /* Get attributes for device and inode. */ - error = VOP_GETATTR(nid.ni_vp, &va, l->l_proc->p_ucred, l); + error = VOP_GETATTR(nid.ni_vp, &va, l->l_proc->p_cred, l); if (error) { vrele(nid.ni_vp); return (error); |
