PERFORCE change 120668 for review

Robert Watson rwatson at FreeBSD.org
Thu May 31 14:34:37 UTC 2007


http://perforce.freebsd.org/chv.cgi?CH=120668

Change 120668 by rwatson at rwatson_zoo on 2007/05/31 14:34:33

	Don't allow raw IPv6 sockets in jail.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/netinet6/raw_ip6.c#4 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/netinet6/raw_ip6.c#4 (text+ko) ====

@@ -352,7 +352,7 @@
 	INP_LOCK(in6p);
 
 	priv = 0;
-	if (suser_cred(so->so_cred, SUSER_ALLOWJAIL) == 0)
+	if (suser_cred(so->so_cred, 0) == 0)
 		priv = 1;
 	dst = &dstsock->sin6_addr;
 	if (control) {


More information about the p4-projects mailing list