Disable chflags() from within jail() so that root within jail can't make

a mess in securelevel environments.  Results in one warning during
/etc/rc as it attempts to remove file flags, but this is harmless.

Approved by:	High Lord Hubbard
This commit is contained in:
Robert Watson 2000-02-20 01:10:36 +00:00
parent da8a39382b
commit 41ecf3565f
1 changed files with 1 additions and 1 deletions

View File

@ -444,7 +444,7 @@ ufs_setattr(ap)
if (vp->v_mount->mnt_flag & MNT_RDONLY)
return (EROFS);
if (cred->cr_uid != ip->i_uid &&
(error = suser_xxx(cred, p, PRISON_ROOT)))
(error = suser(p)))
return (error);
if (cred->cr_uid == 0) {
if ((ip->i_flags