diff options
| author | Olivier Certner <olce@FreeBSD.org> | 2025-05-27 08:20:06 +0000 |
|---|---|---|
| committer | Olivier Certner <olce@FreeBSD.org> | 2025-05-27 09:20:07 +0000 |
| commit | b5c9889e369a801ce7c1115f2535ddacbd69800d (patch) | |
| tree | d3d10cf754cc93b2d030d54da48120077fde9bfc /sys/security | |
| parent | e89d737041d15d8b3763c2829ee97dc8fcc69cbc (diff) | |
Diffstat (limited to 'sys/security')
| -rw-r--r-- | sys/security/mac_do/mac_do.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/security/mac_do/mac_do.c b/sys/security/mac_do/mac_do.c index a83c194b24ae..9aeafa62b56d 100644 --- a/sys/security/mac_do/mac_do.c +++ b/sys/security/mac_do/mac_do.c @@ -258,7 +258,8 @@ check_type_and_type_flags(const id_type_t type, const flags_t flags) "groups specification are exclusive"; goto unexpected_flags; } - if (((flags & MDF_PRIMARY) != 0 || (flags & MDF_ANY) != 0) && + if (type == IT_GID && + ((flags & MDF_PRIMARY) != 0 || (flags & MDF_ANY) != 0) && (flags & MDF_HAS_PRIMARY_CLAUSE) == 0) { str = "Presence of folded primary clause not reflected " "by presence of MDF_HAS_PRIMARY_CLAUSE"; |