cvs commit: src/sys/netipsec keysock.c

Wed Nov 14 03:52:45 PST 2007

bz          2007-11-14 11:52:44 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/netipsec         keysock.c 
  Log:
  MFC: rev 1.19 sys/netipsec/keysock.c
  
    Add a missing priv check in key_attach to prevent non-su users
    from messing with the spdb and sadb.
  
    Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
    longer going via raw_usrreqs.pr_attach.
  
  Approved by:    re (kensmith)
  
  Revision  Changes    Path
  1.18.2.1  +7 -0      src/sys/netipsec/keysock.c