cvs commit: src/sys/security/mac_seeotheruids mac_seeotheruids.c

[Robert Watson]

rwatson     2008-09-30 16:15:46 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_6)
    sys/security/mac_seeotheruids mac_seeotheruids.c 
  Log:
  SVN rev 183501 on 2008-09-30 16:15:46Z by rwatson
  
  Pass SUSER_ALLOWJAIL flag to suser_cred(9) in mac_seeotheruids: allow
  root in jail to see processes in the same jail with other uids.  This
  was previously restricted as the default, but in practice it is fine
  to allow this as the caller implements jail scoping.
  
  Reported by:    George Mamalakis <mamalos at eng.auth.gr>
  Approved by:    re (kensmith, kib)
  
  Revision  Changes    Path
  1.7.2.1   +1 -1      src/sys/security/mac_seeotheruids/mac_seeotheruids.c