Add a missing priv check in key_attach to prevent non-su users

from messing with the spdb and sadb.

Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
longer going via raw_usrreqs.pr_attach.

Reported by:	Pawel Worach
Identified by:	rwatson
Reviewed by:	rwatson
MFC after:	3 days

1 files changed, 7 insertions, 0 deletions

diff --git a/sys/netipsec/keysock.c b/sys/netipsec/keysock.c
index 21539f12..17ef9eb 100644
--- a/sys/netipsec/keysock.c
+++ b/sys/netipsec/keysock.c
@@ -43,6 +43,7 @@
 #include <sys/malloc.h>
 #include <sys/mbuf.h>
 #include <sys/mutex.h>
+#include <sys/priv.h>
 #include <sys/protosw.h>
 #include <sys/signalvar.h>
 #include <sys/socket.h>
@@ -392,6 +393,12 @@ key_attach(struct socket *so, int proto, struct thread *td)
 		return ENOBUFS;
 
 	so->so_pcb = (caddr_t)kp;
+
+	if (td != NULL) {
+		error = priv_check(td, PRIV_NET_RAW);
+		if (error)
+			return error;
+	}
 	error = raw_attach(so, proto);
 	kp = (struct keycb *)sotorawcb(so);
 	if (error) {