diff options
author | rwatson <rwatson@FreeBSD.org> | 2000-02-20 01:10:36 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2000-02-20 01:10:36 +0000 |
commit | fd37898b9f096d1131358bd7a09ddf2b8530e4d3 (patch) | |
tree | 0766497ceb6aba413b86fc1692a93d5c6fb52e1a | |
parent | cee74ce38920b8f7c2ff067518c0703bb0de870e (diff) | |
download | FreeBSD-src-fd37898b9f096d1131358bd7a09ddf2b8530e4d3.zip FreeBSD-src-fd37898b9f096d1131358bd7a09ddf2b8530e4d3.tar.gz |
Disable chflags() from within jail() so that root within jail can't make
a mess in securelevel environments. Results in one warning during
/etc/rc as it attempts to remove file flags, but this is harmless.
Approved by: High Lord Hubbard
-rw-r--r-- | sys/ufs/ufs/ufs_vnops.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/ufs/ufs/ufs_vnops.c b/sys/ufs/ufs/ufs_vnops.c index 9616b37..5696895 100644 --- a/sys/ufs/ufs/ufs_vnops.c +++ b/sys/ufs/ufs/ufs_vnops.c @@ -444,7 +444,7 @@ ufs_setattr(ap) if (vp->v_mount->mnt_flag & MNT_RDONLY) return (EROFS); if (cred->cr_uid != ip->i_uid && - (error = suser_xxx(cred, p, PRISON_ROOT))) + (error = suser(p))) return (error); if (cred->cr_uid == 0) { if ((ip->i_flags |