PERFORCE change 114557 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=114557

Change 114557 by rwatson at rwatson_cinnamon on 2007/02/15 14:31:43

	Generally, we allow PRIV_SEEOTHERUIDS in jail, so allow it in
	mac_seeotheruids policy also.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/security/mac_seeotheruids/mac_seeotheruids.c#6 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/security/mac_seeotheruids/mac_seeotheruids.c#6 (text+ko) ====

@@ -126,7 +126,8 @@
 		return (0);
 
 	if (suser_privileged) {
-		if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, 0) == 0)
+		if (priv_check_cred(u1, PRIV_SEEOTHERUIDS, SUSER_ALLOWJAIL)
+		    == 0)
 			return (0);
 	}