diff options
| author | julian <julian@FreeBSD.org> | 1999-11-21 23:06:30 +0000 |
|---|---|---|
| committer | julian <julian@FreeBSD.org> | 1999-11-21 23:06:30 +0000 |
| commit | 2d7f08ef2e7b8c5e0590681fca7eaedfc1371cb5 (patch) | |
| tree | f7d29145c2f38e45bd65035b5ad941f87e6c9236 /sys/netgraph | |
| parent | 0cfd9aa083a96ac6640836d8c3b9e865c7eba83c (diff) | |
| download | FreeBSD-src-2d7f08ef2e7b8c5e0590681fca7eaedfc1371cb5.zip FreeBSD-src-2d7f08ef2e7b8c5e0590681fca7eaedfc1371cb5.tar.gz | |
It's time to only allow root to manipulate netgraph nodes.
(I meant to do this before checking in to FreeBSD and forgot)
Diffstat (limited to 'sys/netgraph')
| -rw-r--r-- | sys/netgraph/ng_socket.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/netgraph/ng_socket.c b/sys/netgraph/ng_socket.c index 6365c87..7948a6f 100644 --- a/sys/netgraph/ng_socket.c +++ b/sys/netgraph/ng_socket.c @@ -160,6 +160,8 @@ ngc_attach(struct socket *so, int proto, struct proc *p) { struct ngpcb *const pcbp = sotongpcb(so); + if ((error = suser(p))) + return (EPERM); if (pcbp != NULL) return (EISCONN); return (ng_attach_cntl(so)); |
