From 80c9c40df91c28b88ab658a2dd13637a8fc1e5ed Mon Sep 17 00:00:00 2001 From: Robert Watson Date: Fri, 27 Apr 2001 01:56:32 +0000 Subject: [PATCH] o Remove the disabled p_cansched() test cases that permitted users to modify the scheduling properties of processes with a different real uid but the same effective uid (i.e., daemons, et al). (note: these cases were previously commented out, so this does not change the compiled code at al) Obtained from: TrustedBSD Project --- sys/kern/kern_prot.c | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/sys/kern/kern_prot.c b/sys/kern/kern_prot.c index 33095af6732..64fcbf9d9a7 100644 --- a/sys/kern/kern_prot.c +++ b/sys/kern/kern_prot.c @@ -1143,17 +1143,6 @@ p_cansched(struct proc *p1, struct proc *p2, int *privused) return (0); if (p1->p_ucred->cr_uid == p2->p_cred->p_ruid) return (0); -#if 0 - /* - * XXX should a process be able to affect another process - * acting as the same uid (i.e., sendmail delivery, lpd, - * et al?) - */ - if (p1->p_cred->p_ruid == p2->p_ucred->cr_uid) - return (0); - if (p1->p_ucred->cr_uid == p2->p_ucred->cr_uid) - return (0); -#endif /* 0 */ if (!suser_xxx(0, p1, PRISON_ROOT)) { if (privused != NULL)