diff options
| author | rwatson <rwatson@FreeBSD.org> | 2000-11-10 23:57:48 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2000-11-10 23:57:48 +0000 |
| commit | 21b70fd676451b3a41466c6a291f9c72576fe34d (patch) | |
| tree | cfe6d182f87e3c5b3c1bf75b572d8a2610336348 /sys/kern/kern_prot.c | |
| parent | 919c3e124ed41242fbbd60029a9e5158ab8a15ea (diff) | |
| download | FreeBSD-src-21b70fd676451b3a41466c6a291f9c72576fe34d.zip FreeBSD-src-21b70fd676451b3a41466c6a291f9c72576fe34d.tar.gz | |
o Fix a mis-transcription of sef's -STABLE protection fixes--only root
could debug processes after the commit that introduced the typo.
Security is good, but security is not always the same as turning things
off :-).
PR: kern/22711
Obtained from: brooks@one-eyed-alien.net
Diffstat (limited to 'sys/kern/kern_prot.c')
| -rw-r--r-- | sys/kern/kern_prot.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/kern/kern_prot.c b/sys/kern/kern_prot.c index 744ac72..ab1578b 100644 --- a/sys/kern/kern_prot.c +++ b/sys/kern/kern_prot.c @@ -1084,7 +1084,7 @@ p_candebug(const struct proc *p1, const struct proc *p2, int *privused) /* add a CAP_SYS_PTRACE here? */ if (p1->p_cred->pc_ucred->cr_uid != p2->p_cred->p_ruid || p1->p_cred->p_ruid != p2->p_cred->p_ruid || - p1->p_cred->p_svuid == p2->p_cred->p_ruid || + p1->p_cred->p_svuid != p2->p_cred->p_ruid || p2->p_flag & P_SUGID) { if ((error = suser_xxx(0, p1, PRISON_ROOT))) return (error); |
