Module Name: src
Committed By: stacktic
Date: Wed Nov 18 09:47:18 UTC 2009
Modified Files:
src/sys/secmodel/suser: secmodel_suser.c
Log Message:
Fixed security.models.suser.curtain to deny when uid does not match.
OK pooka@
To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.32 src/sys/secmodel/suser/secmodel_suser.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/sys/secmodel/suser/secmodel_suser.c
diff -u src/sys/secmodel/suser/secmodel_suser.c:1.31 src/sys/secmodel/suser/secmodel_suser.c:1.32
--- src/sys/secmodel/suser/secmodel_suser.c:1.31 Sat Nov 14 18:36:56 2009
+++ src/sys/secmodel/suser/secmodel_suser.c Wed Nov 18 09:47:18 2009
@@ -1,4 +1,4 @@
-/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */
+/* $NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $ */
/*-
* Copyright (c) 2006 Elad Efrat <e...@netbsd.org>
* All rights reserved.
@@ -38,7 +38,7 @@
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $");
#include <sys/types.h>
#include <sys/param.h>
@@ -537,7 +537,7 @@
}
if (secmodel_suser_curtain) {
- if (kauth_cred_uidmatch(cred, p->p_cred) != 0)
+ if (!kauth_cred_uidmatch(cred, p->p_cred))
result = KAUTH_RESULT_DENY;
}
