On Fri, Apr 1, 2011 at 3:47 PM, Miod Vallat <m...@online.fr> wrote:
> Tentative fix, mostly by beck@. Would need some IPv6 tests of course.
> +int
> +vnode_policy_enforce(struct componentname *cnp, struct proc *p) {
> + int i = 0;
> + if (strcmp(p->p_p->ps_pptr->ps_mainproc->p_comm, "scp") != 0) {
> + return(0);
> + }
Okay, but if vnode_policy_enforce() can be called outside the kernel
lock we'll need to remember to lock the parent process, so that it
can't change beneath the strcmp().
Philip Guenther
