I haven't reviewed that particular piece of code for correctness, but
noticed that the caching of the privilege check there actually does cause
problems for a variety of reasons in my work. I'd much rather individual
uses of suser() appeared in the netinet6 tree, and that appropriate
context for
On a related topic, there appears to be a code error in the
IPSEC code.
Specifically, the priv flag is set to 1 if the user is root
and the socket is non-null (this lets the code be called
from the bridging code as well, so ignore the first half of
the "if" test, and concentrate on the "uid == 0"
2 matches
Mail list logo