o The move to using VADMIN under vaccess() resulted in some system

  calls returning EACCES instead of EPERM.  This patch modifies vaccess()
  to return EPERM instead of EACCES if VADMIN is among the requested
  rights.  This affects functions normally limited to the owners of
  a file, such as chmod(), as EPERM is the error indicating that
  privilege would allow the operation, rather than a chance in mandatory
  or discretionary rights.

Reported by:	bde

1 files changed, 1 insertions, 1 deletions

diff --git a/sys/kern/vfs_export.c b/sys/kern/vfs_export.c
index 285e084..fba809c 100644
--- a/sys/kern/vfs_export.c
+++ b/sys/kern/vfs_export.c
@@ -3128,5 +3128,5 @@ privcheck:
 	}
 #endif
 
-	return (EACCES);
+	return ((acc_mode & VADMIN) ? EPERM : EACCES);
 }