PERFORCE change 120668 for review
Robert Watson
rwatson at FreeBSD.org
Thu May 31 14:34:37 UTC 2007
http://perforce.freebsd.org/chv.cgi?CH=120668
Change 120668 by rwatson at rwatson_zoo on 2007/05/31 14:34:33
Don't allow raw IPv6 sockets in jail.
Affected files ...
.. //depot/projects/trustedbsd/priv/sys/netinet6/raw_ip6.c#4 edit
Differences ...
==== //depot/projects/trustedbsd/priv/sys/netinet6/raw_ip6.c#4 (text+ko) ====
@@ -352,7 +352,7 @@
INP_LOCK(in6p);
priv = 0;
- if (suser_cred(so->so_cred, SUSER_ALLOWJAIL) == 0)
+ if (suser_cred(so->so_cred, 0) == 0)
priv = 1;
dst = &dstsock->sin6_addr;
if (control) {
More information about the p4-projects
mailing list