system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-09-30 05:36:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

MAC/do: allow to call setuid if real user id is 0

Browse source 
This fixed sshd not able to call restore_uid when MAC/do policy is
loaded
This commit is contained in:
Baptiste Daroussin 2024-05-23 12:09:11 +02:00
parent 56a8aca83a
commit 61b07f8aa5
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sys/security/mac_do/mac_do.c
View file

@ -489,7 +489,7 @@ check_setuid(struct ucred *cred, uid_t uid)
if (do_enabled == 0)
return (0);
if (cred->cr_uid == uid || cred->cr_uid == 0)
if (cred->cr_uid == uid || cred->cr_uid == 0 || cred->cr_ruid == 0)
return (0);
if (vn_fullpath(curproc->p_textvp, &fullpath, &freebuf) != 0)