Module Name: src Committed By: elad Date: Tue May 26 06:57:38 UTC 2009
Modified Files: src/sys/kern: kern_resource.c Log Message: PR/41489: Stathis Kamperis: etpriority(2) returns EACCES instead of EPERM Per discussion on the PR's audit trail, put back original checks for now. To generate a diff of this commit: cvs rdiff -u -r1.151 -r1.152 src/sys/kern/kern_resource.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/sys/kern/kern_resource.c diff -u src/sys/kern/kern_resource.c:1.151 src/sys/kern/kern_resource.c:1.152 --- src/sys/kern/kern_resource.c:1.151 Sun Mar 29 01:02:50 2009 +++ src/sys/kern/kern_resource.c Tue May 26 06:57:38 2009 @@ -1,4 +1,4 @@ -/* $NetBSD: kern_resource.c,v 1.151 2009/03/29 01:02:50 mrg Exp $ */ +/* $NetBSD: kern_resource.c,v 1.152 2009/05/26 06:57:38 elad Exp $ */ /*- * Copyright (c) 1982, 1986, 1991, 1993 @@ -37,7 +37,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: kern_resource.c,v 1.151 2009/03/29 01:02:50 mrg Exp $"); +__KERNEL_RCSID(0, "$NetBSD: kern_resource.c,v 1.152 2009/05/26 06:57:38 elad Exp $"); #include <sys/param.h> #include <sys/systm.h> @@ -229,6 +229,11 @@ KASSERT(mutex_owned(chgp->p_lock)); + if (kauth_cred_geteuid(cred) && kauth_cred_getuid(cred) && + kauth_cred_geteuid(cred) != kauth_cred_geteuid(chgp->p_cred) && + kauth_cred_getuid(cred) != kauth_cred_geteuid(chgp->p_cred)) + return (EPERM); + if (n > PRIO_MAX) n = PRIO_MAX; if (n < PRIO_MIN)