CVS commit: src/sys/secmodel/extensions

[Jean-Yves Migeon]

Module Name:    src
Committed By:   jym
Date:           Sun Dec  4 21:04:51 UTC 2011

Modified Files:
        src/sys/secmodel/extensions: secmodel_extensions.c

Log Message:
When user_set_cpu_affinity is non-zero, only allow users to modify
the CPU affinity of the LWPs they own.


To generate a diff of this commit:
cvs rdiff -u -r1.1 -r1.2 src/sys/secmodel/extensions/secmodel_extensions.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


Modified files:

Index: src/sys/secmodel/extensions/secmodel_extensions.c
diff -u src/sys/secmodel/extensions/secmodel_extensions.c:1.1 src/sys/secmodel/extensions/secmodel_extensions.c:1.2
--- src/sys/secmodel/extensions/secmodel_extensions.c:1.1	Sun Dec  4 19:25:00 2011
+++ src/sys/secmodel/extensions/secmodel_extensions.c	Sun Dec  4 21:04:51 2011
@@ -1,4 +1,4 @@
-/* $NetBSD: secmodel_extensions.c,v 1.1 2011/12/04 19:25:00 jym Exp $ */
+/* $NetBSD: secmodel_extensions.c,v 1.2 2011/12/04 21:04:51 jym Exp $ */
 /*-
  * Copyright (c) 2011 Elad Efrat <e...@netbsd.org>
  * All rights reserved.
@@ -27,7 +27,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_extensions.c,v 1.1 2011/12/04 19:25:00 jym Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_extensions.c,v 1.2 2011/12/04 21:04:51 jym Exp $");
 
 #include <sys/types.h>
 #include <sys/param.h>
@@ -413,7 +413,10 @@ secmodel_extensions_process_cb(kauth_cre
 
 	case KAUTH_PROCESS_SCHEDULER_SETAFFINITY:
 		if (user_set_cpu_affinity != 0) {
-			result = KAUTH_RESULT_ALLOW;
+			struct proc *p = arg0;
+
+			if (kauth_cred_uidmatch(cred, p->p_cred))
+				result = KAUTH_RESULT_ALLOW;
 		}
 		break;