summaryrefslogtreecommitdiff
path: root/sys/dev/verified_exec.c
diff options
context:
space:
mode:
Diffstat (limited to 'sys/dev/verified_exec.c')
-rw-r--r--sys/dev/verified_exec.c14
1 files changed, 8 insertions, 6 deletions
diff --git a/sys/dev/verified_exec.c b/sys/dev/verified_exec.c
index d69de7b2c59..47b7a544f1b 100644
--- a/sys/dev/verified_exec.c
+++ b/sys/dev/verified_exec.c
@@ -1,4 +1,4 @@
-/* $NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $ */
+/* $NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $ */
/*-
* Copyright 2005 Elad Efrat <elad@bsd.org.il>
@@ -31,9 +31,9 @@
#include <sys/cdefs.h>
#if defined(__NetBSD__)
-__KERNEL_RCSID(0, "$NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $");
#else
-__RCSID("$Id: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $\n$NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $");
+__RCSID("$Id: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $\n$NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $");
#endif
#include <sys/param.h>
@@ -126,10 +126,12 @@ veriexecopen(dev_t dev __unused, int flags __unused,
if (veriexec_verbose >= 2) {
printf("Veriexec: veriexecopen: Veriexec load device "
"open attempt by uid=%u, pid=%u. (dev=%u)\n",
- l->l_proc->p_ucred->cr_uid, l->l_proc->p_pid, dev);
+ kauth_cred_geteuid(l->l_proc->p_cred),
+ l->l_proc->p_pid, dev);
}
- if (suser(l->l_proc->p_ucred, &l->l_proc->p_acflag) != 0)
+ if (kauth_authorize_generic(l->l_proc->p_cred, KAUTH_GENERIC_ISSUSER,
+ &l->l_proc->p_acflag) != 0)
return (EPERM);
if (veriexec_dev_usage > 0) {
@@ -260,7 +262,7 @@ veriexec_load(struct veriexec_params *params, struct lwp *l)
}
/* Get attributes for device and inode. */
- error = VOP_GETATTR(nid.ni_vp, &va, l->l_proc->p_ucred, l);
+ error = VOP_GETATTR(nid.ni_vp, &va, l->l_proc->p_cred, l);
if (error) {
vrele(nid.ni_vp);
return (error);