[src/trunk]: src/sys/secmodel/suser Fixed security.models.suser.curtain to de...

[stacktic <stacktic%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/6da53ba11ad2
branches:  trunk
changeset: 749113:6da53ba11ad2
user:      stacktic <stacktic%NetBSD.org@localhost>
date:      Wed Nov 18 09:47:18 2009 +0000

description:
Fixed security.models.suser.curtain to deny when uid does not match.
OK pooka@

diffstat:

 sys/secmodel/suser/secmodel_suser.c |  6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diffs (27 lines):

diff -r 5182296ddb52 -r 6da53ba11ad2 sys/secmodel/suser/secmodel_suser.c
--- a/sys/secmodel/suser/secmodel_suser.c       Wed Nov 18 06:10:50 2009 +0000
+++ b/sys/secmodel/suser/secmodel_suser.c       Wed Nov 18 09:47:18 2009 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */
+/* $NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $ */
 /*-
  * Copyright (c) 2006 Elad Efrat <elad%NetBSD.org@localhost>
  * All rights reserved.
@@ -38,7 +38,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.32 2009/11/18 09:47:18 stacktic Exp $");
 
 #include <sys/types.h>
 #include <sys/param.h>
@@ -537,7 +537,7 @@
                        }
 
                        if (secmodel_suser_curtain) {
-                               if (kauth_cred_uidmatch(cred, p->p_cred) != 0)
+                               if (!kauth_cred_uidmatch(cred, p->p_cred))
                                        result = KAUTH_RESULT_DENY;
                        }