git: 2c1ade6cd608 - stable/13 - cap_net: fix verification of bind permission

From: Mariusz Zaborski <oshogbo_at_FreeBSD.org>
Date: Sat, 12 Mar 2022 10:29:34 UTC
The branch stable/13 has been updated by oshogbo:

URL: https://cgit.FreeBSD.org/src/commit/?id=2c1ade6cd608aaa8a12885f42cde176afc417031

commit 2c1ade6cd608aaa8a12885f42cde176afc417031
Author:     Mariusz Zaborski <oshogbo@FreeBSD.org>
AuthorDate: 2021-12-14 11:01:10 +0000
Commit:     Mariusz Zaborski <oshogbo@FreeBSD.org>
CommitDate: 2022-03-12 10:28:42 +0000

    cap_net: fix verification of bind permission
    
    MFC after:      5 days
    
    (cherry picked from commit f45ca435bd2cba2ea6d9b79dbef275bc5ea4036a)
---
 lib/libcasper/services/cap_net/cap_net.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/libcasper/services/cap_net/cap_net.c b/lib/libcasper/services/cap_net/cap_net.c
index 1d5531676268..a1a66a05b5a2 100644
--- a/lib/libcasper/services/cap_net/cap_net.c
+++ b/lib/libcasper/services/cap_net/cap_net.c
@@ -1378,7 +1378,7 @@ net_limit(const nvlist_t *oldlimits, const nvlist_t *newlimits)
 	 */
 	if (oldlimits == NULL)
 		return (0);
-	if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_BIND))
+	if (!hasbind && nvlist_exists(oldlimits, LIMIT_NV_BIND))
 		return (ENOTCAPABLE);
 	if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_CONNECT))
 		return (ENOTCAPABLE);