PERFORCE change 120629 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=120629

Change 120629 by rwatson at rwatson_zoo on 2007/05/30 14:04:10

	Re-add missing setaudit() MAC check.

Affected files ...

.. //depot/projects/trustedbsd/audit3/sys/security/audit/audit_syscalls.c#41 edit

Differences ...

==== //depot/projects/trustedbsd/audit3/sys/security/audit/audit_syscalls.c#41 (text+ko) ====

@@ -480,6 +480,11 @@
 	PROC_LOCK(td->td_proc);
 	oldcred = td->td_proc->p_ucred;
 	crcopy(newcred, oldcred);
+#ifdef MAC
+	error = mac_check_proc_setauid(oldcred, id);
+	if (error)
+		goto fail;
+#endif
 	error = priv_check_cred(oldcred, PRIV_AUDIT_SETAUDIT, 0);
 	if (error)
 		goto fail;