From f7312ca2a9237b04268d67df0f86187ab10ebf7f Mon Sep 17 00:00:00 2001
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 26 Sep 2001 20:13:16 +0000
Subject: [PATCH] o Modify access control code for the CAM SCSI pass-through
 device to   use securelevel_gt() instead of direct securelevel variable test.

Obtained from:	TrustedBSD Project
---
 sys/cam/scsi/scsi_pass.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/sys/cam/scsi/scsi_pass.c b/sys/cam/scsi/scsi_pass.c
index 22d49fe98b3..964d3837f85 100644
--- a/sys/cam/scsi/scsi_pass.c
+++ b/sys/cam/scsi/scsi_pass.c
@@ -37,6 +37,7 @@
 #include <sys/conf.h>
 #include <sys/errno.h>
 #include <sys/devicestat.h>
+#include <sys/proc.h>
 
 #include <cam/cam.h>
 #include <cam/cam_ccb.h>
@@ -370,9 +371,10 @@ passopen(dev_t dev, int flags, int fmt, struct thread *td)
 	/*
 	 * Don't allow access when we're running at a high securelevel.
 	 */
-	if (securelevel > 1) {
+	error = securelevel_gt(td->td_proc->p_ucred, 1);
+	if (error) {
 		splx(s);
-		return(EPERM);
+		return(error);
 	}
 
 	/*