PERFORCE change 79534 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=79534

Change 79534 by rwatson at rwatson_paprika on 2005/07/04 11:07:18

	Convert suser() checks associated with retrieving file system id/
	handle data to CAP_SYS_ADMIN.  This may be the closest match --
	another alternative might be CAP_SYS_RAWIO.

Affected files ...

.. //depot/projects/trustedbsd/sebsd/sys/kern/vfs_syscalls.c#16 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/sys/kern/vfs_syscalls.c#16 (text+ko) ====

@@ -568,7 +568,7 @@
 				continue;
 			}
 			sp->f_flags = mp->mnt_flag & MNT_VISFLAGMASK;
-			if (suser(td)) {
+			if (cap_check(td, CAP_SYS_ADMIN)) {
 				bcopy(sp, &sb, sizeof(sb));
 				sb.f_fsid.val[0] = sb.f_fsid.val[1] = 0;
 				sp = &sb;
@@ -3927,7 +3927,7 @@
 	int vfslocked;
 	int error;
 
-	error = suser(td);
+	error = cap_check(td, CAP_SYS_ADMIN);
 	if (error)
 		return (error);
 	NDINIT(&nd, LOOKUP, NOFOLLOW | LOCKLEAF | MPSAFE,
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message