CVS commit: src/sys/secmodel/suser

[Arnaud Ysmal]

Module Name:    src
Committed By:   stacktic
Date:           Wed Nov 18 09:47:18 UTC 2009

Modified Files:
        src/sys/secmodel/suser: secmodel_suser.c

Log Message:
Fixed security.models.suser.curtain to deny when uid does not match.
OK pooka@


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.32 src/sys/secmodel/suser/secmodel_suser.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


Modified files:

Index: src/sys/secmodel/suser/secmodel_suser.c
diff -u src/sys/secmodel/suser/secmodel_suser.c:1.31 src/sys/secmodel/suser/secmodel_suser.c:1.32
--- src/sys/secmodel/suser/secmodel_suser.c:1.31	Sat Nov 14 18:36:56 2009
+++ src/sys/secmodel/suser/secmodel_suser.c	Wed Nov 18 09:47:18 2009
@@ -1,4 +1,4 @@
-/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */
+/* $NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $ */
 /*-
  * Copyright (c) 2006 Elad Efrat <e...@netbsd.org>
  * All rights reserved.
@@ -38,7 +38,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $");
 
 #include <sys/types.h>
 #include <sys/param.h>
@@ -537,7 +537,7 @@
 			}
 
 			if (secmodel_suser_curtain) {
-				if (kauth_cred_uidmatch(cred, p->p_cred) != 0)
+				if (!kauth_cred_uidmatch(cred, p->p_cred))
 					result = KAUTH_RESULT_DENY;
 			}