mirror of
https://git.FreeBSD.org/src.git
synced 2024-12-20 11:11:24 +00:00
Keep PRIV_KMEM_READ permitted inside jails as it is on the outside.
This commit is contained in:
parent
cbb61c6b61
commit
bb56d716ea
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=255316
@ -3885,6 +3885,13 @@ prison_priv_check(struct ucred *cred, int priv)
|
||||
case PRIV_VFS_SETGID:
|
||||
case PRIV_VFS_STAT:
|
||||
case PRIV_VFS_STICKYFILE:
|
||||
|
||||
/*
|
||||
* As in the non-jail case, non-root users are expected to be
|
||||
* able to read kernel/phyiscal memory (provided /dev/[k]mem
|
||||
* exists in the jail and they have permission to access it).
|
||||
*/
|
||||
case PRIV_KMEM_READ:
|
||||
return (0);
|
||||
|
||||
/*
|
||||
|
Loading…
Reference in New Issue
Block a user