From 8c7cc7234ef7120e485eee661bde8fa9bc781b79 Mon Sep 17 00:00:00 2001
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 26 Sep 2001 20:17:15 +0000
Subject: [PATCH] o Modify syscons ioctl securelevel checks to use
 securelevel_gt() (oh look,   yet another API to do direct hardware I/O
 access.)

Obtained from:	TrustedBSD Project
---
 sys/dev/syscons/syscons.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/sys/dev/syscons/syscons.c b/sys/dev/syscons/syscons.c
index 644864e0c7e..be9cc273186 100644
--- a/sys/dev/syscons/syscons.c
+++ b/sys/dev/syscons/syscons.c
@@ -980,8 +980,9 @@ scioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct thread *td)
 	error = suser_td(td);
 	if (error != 0)
 	    return error;
-	if (securelevel > 0)
-	    return EPERM;
+	error = securelevel_gt(td->td_proc->p_ucred, 0);
+	if (error != 0)
+		return error;
 #ifdef __i386__
 	td->td_frame->tf_eflags |= PSL_IOPL;
 #endif