PERFORCE change 114559 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=114559

Change 114559 by rwatson at rwatson_cinnamon on 2007/02/15 14:36:10

	Make privilege check for audit privileves in jail match what is
	being done elsewhere: for now, no audit in jail.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/kern/kern_jail.c#15 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/kern/kern_jail.c#15 (text+ko) ====

@@ -542,6 +542,7 @@
 		 */
 	case PRIV_KTRACE:
 
+#if 0
 		/*
 		 * Allow jailed processes to configure audit identity and
 		 * submit audit records (login, etc).  In the future we may
@@ -551,6 +552,7 @@
 	case PRIV_AUDIT_GETAUDIT:
 	case PRIV_AUDIT_SETAUDIT:
 	case PRIV_AUDIT_SUBMIT:
+#endif
 
 		/*
 		 * Allow jailed processes to manipulate process UNIX