From 08d8637e39fb612f67c97526df6f58f0872fb6cc Mon Sep 17 00:00:00 2001 From: jhb Date: Thu, 2 Oct 2014 21:18:16 +0000 Subject: Require p_cansched() for changing a process' protection status via procctl() rather than p_cansee(). Submitted by: rwatson MFC after: 3 days --- sys/kern/sys_process.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/kern/sys_process.c') diff --git a/sys/kern/sys_process.c b/sys/kern/sys_process.c index b30e12a..d97b583 100644 --- a/sys/kern/sys_process.c +++ b/sys/kern/sys_process.c @@ -1240,7 +1240,7 @@ protect_setchild(struct thread *td, struct proc *p, int flags) { PROC_LOCK_ASSERT(p, MA_OWNED); - if (p->p_flag & P_SYSTEM || p_cansee(td, p) != 0) + if (p->p_flag & P_SYSTEM || p_cansched(td, p) != 0) return (0); if (flags & PPROT_SET) { p->p_flag |= P_PROTECTED; -- cgit v1.1