cvs commit: src/sys/netipsec keysock.c

[Bjoern A. Zeeb]

bz          2007-11-12 23:47:48 UTC

  FreeBSD src repository

  Modified files:
    sys/netipsec         keysock.c 
  Log:
  Add a missing priv check in key_attach to prevent non-su users
  from messing with the spdb and sadb.
  
  Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
  longer going via raw_usrreqs.pr_attach.
  
  Reported by:    Pawel Worach
  Identified by:  rwatson
  Reviewed by:    rwatson
  MFC after:      3 days
  
  Revision  Changes    Path
  1.19      +7 -0      src/sys/netipsec/keysock.c