The branch main has been updated by oshogbo:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=f45ca435bd2cba2ea6d9b79dbef275bc5ea4036a

commit f45ca435bd2cba2ea6d9b79dbef275bc5ea4036a
Author:     Mariusz Zaborski <osho...@freebsd.org>
AuthorDate: 2021-12-14 11:01:10 +0000
Commit:     Mariusz Zaborski <osho...@freebsd.org>
CommitDate: 2021-12-14 11:02:40 +0000

    cap_net: fix verification of bind permission
    
    MFC after:      5 days
---
 lib/libcasper/services/cap_net/cap_net.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/libcasper/services/cap_net/cap_net.c 
b/lib/libcasper/services/cap_net/cap_net.c
index 5e10714e3614..c6abaa69faf6 100644
--- a/lib/libcasper/services/cap_net/cap_net.c
+++ b/lib/libcasper/services/cap_net/cap_net.c
@@ -1382,7 +1382,7 @@ net_limit(const nvlist_t *oldlimits, const nvlist_t 
*newlimits)
         */
        if (oldlimits == NULL)
                return (0);
-       if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_BIND))
+       if (!hasbind && nvlist_exists(oldlimits, LIMIT_NV_BIND))
                return (ENOTCAPABLE);
        if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_CONNECT))
                return (ENOTCAPABLE);

Reply via email to