diff options
| author | Wojciech Macek <wma@FreeBSD.org> | 2022-06-29 08:48:01 +0000 |
|---|---|---|
| committer | Wojciech Macek <wma@FreeBSD.org> | 2022-06-29 08:48:01 +0000 |
| commit | 15c362aeb7784385cb464fa364cbdd7a1e64e787 (patch) | |
| tree | 7636af117b4bdadff6f026282727b592bd992361 /sys/security/mac_veriexec | |
| parent | 8cff8e6e13a6d3ccff40fc0d8d97f5aef22a8f4d (diff) | |
Diffstat (limited to 'sys/security/mac_veriexec')
| -rw-r--r-- | sys/security/mac_veriexec/mac_veriexec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/security/mac_veriexec/mac_veriexec.c b/sys/security/mac_veriexec/mac_veriexec.c index 7a5b747ef7a2..99a76abd4afb 100644 --- a/sys/security/mac_veriexec/mac_veriexec.c +++ b/sys/security/mac_veriexec/mac_veriexec.c @@ -437,7 +437,7 @@ mac_veriexec_sysctl_check(struct ucred *cred, struct sysctl_oid *oidp, return (0); oid = oidp; - if (oid->oid_kind & CTLFLAG_SECURE) { + if (req->newptr && (oid->oid_kind & CTLFLAG_SECURE)) { return (EPERM); /* XXX call mac_veriexec_priv_check? */ } return 0; |