HomeFreeBSD

MAC/do: allow to call setuid if real user id is 0

Description

MAC/do: allow to call setuid if real user id is 0

This fixed sshd not able to call restore_uid when MAC/do policy is
loaded

(cherry picked from commit 61b07f8aa52844b21637ac264ea134c1aef48cb7)

Details

Provenance
baptAuthored on May 23 2024, 10:09 AM
Parents
rG7f66cc235b3d: mac_do(4): fix typo
Branches
Unknown
Tags
Unknown