system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-10-23 16:52:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

o Modify device open access control for /dev/mem and friends to use

Browse source 
securelevel_gt() instead of direct securelevel variable checks.

Obtained from:	TrustedBSD Project
This commit is contained in:
Robert Watson 2001-09-26 20:08:02 +00:00
parent 785f9ffca3
commit 1851c8fd41
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=83971
2 changed files with 16 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
sys/amd64/amd64/mem.c
View file

@ -115,15 +115,19 @@ mmopen(dev_t dev, int flags, int fmt, struct thread *td)
switch (minor(dev)) {
case 0:
case 1:
if ((flags & FWRITE) && securelevel > 0)
return (EPERM);
if (flags & FWRITE) {
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
}
break;
case 14:
error = suser_td(td);
if (error != 0)
return (error);
if (securelevel > 0)
return (EPERM);
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
td->td_frame->tf_eflags |= PSL_IOPL;
break;
}

12
sys/i386/i386/mem.c
View file

@ -115,15 +115,19 @@ mmopen(dev_t dev, int flags, int fmt, struct thread *td)
switch (minor(dev)) {
case 0:
case 1:
if ((flags & FWRITE) && securelevel > 0)
return (EPERM);
if (flags & FWRITE) {
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
}
break;
case 14:
error = suser_td(td);
if (error != 0)
return (error);
if (securelevel > 0)
return (EPERM);
error = securelevel_gt(td->td_proc->p_ucred, 0);
if (error != 0)
return (error);
td->td_frame->tf_eflags |= PSL_IOPL;
break;
}