DELTA 361798 411 257 SVNfn  Xby rootENDREP DELTA 360068 0 388 SVNS_QPQQJails should hold no disposition on the PRIV_VFS_READ_DIR * policy. priv_check_cred will not specifically allow it, and * we may want a MAC policy to allow it. */ case PRIV_VFS_READ_DIR: return (0@a_@__PRISON_RACCT, M_ZERO | M_WAITOK); racct_create(&prr->prr_racct); strcpy(prr->prr_name, name); refcount_init(&prr->prr_refcount, 1); LIST_INSERT_HEAD(&allprison_racct, prr, prr_next); return (prr); } struct prison_rENDREP DELTA 357888 603 432 SVNb1 N *L;'Lcase PRIV_VFS_READ_DIR: /* * Allow PRIV_VFS_READ_DIR for root if we're not in a * jail, otherwise deny unless a MAC policy grants it. */ if (jailed(cred)) break; /* FALLTHROUGH */ENDREP DELTA 361798 696 446 SVNX._w(_hp,, and * restricted to root when it's turned on to make it relatively safe to * leave on for longer sessions of need if ((error = priv_check(td, PRIV_VFS_READ_DIR)) != 0ENDREP DELTA 164032 8793 5911 SVNDo/m- J%Ne#I=8zGdPQIoOJ,@Oxrv%7n7bqZ0OHTUG<2v ^:]4W,d%Uw&2x^ZrH}VEEtw/j>a@2cI0nlJcZ@d!tTV޳ʶ>3~_B|˒%/$״'2 ѐ7ߙŗ;u/Mx`)v]BC"Ƹfo#0 UdzKcxipΣfMD0眲5v9%g^:˗91w|RdY<̽R7ȄxN0[.c/ u˔os閬*X'6oV\skjNXJ/W93p,YюCI*FVsf\66— i'Ǘӏ=L PXд C}dۆ [ʌye_{XSC4 tSaGӫ$Fٗ"wlm_dֱyMusJ:jv^BZ:uc`[?2 "A ; bF>0SÑ {w^2}v.t`z)u!)m`P>΅}vh l}d<3@tM1Fvg$u $?4ټJ09y((Rf$K1]&1#$[̴{/UY i?MSS5ZE& ^@4ʯ0kȎchc 'Ed(40^ʃ(r_IWX`jlxe@ 6$%!˽ ;Gc fɎ7h5E)v 8csfșu8d7 Qt ]ט̥YE\XN>y/fM@oEQU|lj2%~g˷8 pb_zB8 -`T 0;/QQ+}i5Q>aΓuE @\ek=D,wg<;BE%zoGy4,G#hUBK@f![:3CzǞꪪzlI$Ę̮*U"WK0g?]8@Nc&U-6&ڷzx1&)/}C:Z9`ď!vU%4*0F>PS"|,Yl2^,vFl~]_1ҹ1扟: 8}pc2eaBe!vOXHyp…~p1t{OX@W8 + sYZs$kd*pnjד47lO[s(FG CvQ>\tnגD&$cy"E98U.8A?$ @$yEoQjU\Dyfh&e&ّGOJCGǐJwEpѭ,3d! ȽDJ""Jhw[8њ u?jגbVDC4"D,\UCK6hzon0O w6|o>TV:֩DN?u0hKE*]͝t5%4!lRNv^~ex"RT}_BO*}gQIf:B[e9CEx^!;)0*g`Ҕ"[X.pg&m/Mns{lD>_`+ 9dTZ^ y ) g.b/馭)9uIY5'";7F~F|DޔRh΃jckw#膆M-\CdUsRU.#_lƒl? IWZ6؊ldI7bXsZyt L젘Sضbx,:GE*Mbѐ-C?LCT^>ҾAb%^@<~lN`ě&)ċTRg(]-VV*2?] co$(GMW]::zkO<װ`~tN8xcMzyЇMa^9|/ɌhBq34?k&Iqj_)'T] aXy4͏-k%Z D,jOH|6N hhxa"YGp<~L