From 2867b68bc3d7cdb1bb7b9f8367e4aa0b2fa765f4 Mon Sep 17 00:00:00 2001 From: elad Date: Sun, 14 May 2006 21:42:26 +0000 Subject: integrate kauth. --- sys/dev/verified_exec.c | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) (limited to 'sys/dev/verified_exec.c') diff --git a/sys/dev/verified_exec.c b/sys/dev/verified_exec.c index d69de7b2c59..47b7a544f1b 100644 --- a/sys/dev/verified_exec.c +++ b/sys/dev/verified_exec.c @@ -1,4 +1,4 @@ -/* $NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $ */ +/* $NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $ */ /*- * Copyright 2005 Elad Efrat @@ -31,9 +31,9 @@ #include #if defined(__NetBSD__) -__KERNEL_RCSID(0, "$NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $"); +__KERNEL_RCSID(0, "$NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $"); #else -__RCSID("$Id: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $\n$NetBSD: verified_exec.c,v 1.32 2006/05/06 13:25:36 elad Exp $"); +__RCSID("$Id: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $\n$NetBSD: verified_exec.c,v 1.33 2006/05/14 21:42:26 elad Exp $"); #endif #include @@ -126,10 +126,12 @@ veriexecopen(dev_t dev __unused, int flags __unused, if (veriexec_verbose >= 2) { printf("Veriexec: veriexecopen: Veriexec load device " "open attempt by uid=%u, pid=%u. (dev=%u)\n", - l->l_proc->p_ucred->cr_uid, l->l_proc->p_pid, dev); + kauth_cred_geteuid(l->l_proc->p_cred), + l->l_proc->p_pid, dev); } - if (suser(l->l_proc->p_ucred, &l->l_proc->p_acflag) != 0) + if (kauth_authorize_generic(l->l_proc->p_cred, KAUTH_GENERIC_ISSUSER, + &l->l_proc->p_acflag) != 0) return (EPERM); if (veriexec_dev_usage > 0) { @@ -260,7 +262,7 @@ veriexec_load(struct veriexec_params *params, struct lwp *l) } /* Get attributes for device and inode. */ - error = VOP_GETATTR(nid.ni_vp, &va, l->l_proc->p_ucred, l); + error = VOP_GETATTR(nid.ni_vp, &va, l->l_proc->p_cred, l); if (error) { vrele(nid.ni_vp); return (error); -- cgit