From f45ca435bd2cba2ea6d9b79dbef275bc5ea4036a Mon Sep 17 00:00:00 2001 From: Mariusz Zaborski Date: Tue, 14 Dec 2021 12:01:10 +0100 Subject: [PATCH] cap_net: fix verification of bind permission MFC after: 5 days --- lib/libcasper/services/cap_net/cap_net.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/libcasper/services/cap_net/cap_net.c b/lib/libcasper/services/cap_net/cap_net.c index 5e10714e3614..c6abaa69faf6 100644 --- a/lib/libcasper/services/cap_net/cap_net.c +++ b/lib/libcasper/services/cap_net/cap_net.c @@ -1382,7 +1382,7 @@ net_limit(const nvlist_t *oldlimits, const nvlist_t *newlimits) */ if (oldlimits == NULL) return (0); - if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_BIND)) + if (!hasbind && nvlist_exists(oldlimits, LIMIT_NV_BIND)) return (ENOTCAPABLE); if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_CONNECT)) return (ENOTCAPABLE);