aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMariusz Zaborski <oshogbo@FreeBSD.org>2021-12-14 11:01:10 +0000
committerMariusz Zaborski <oshogbo@FreeBSD.org>2021-12-14 11:02:40 +0000
commitf45ca435bd2cba2ea6d9b79dbef275bc5ea4036a (patch)
tree2175555abcc6c3d1ec15e5821a51a15574b7e297
parent88910b8b7b14386e05bccda0317ace2bfd383ef5 (diff)
downloadsrc-f45ca435bd2cba2ea6d9b79dbef275bc5ea4036a.tar.gz
src-f45ca435bd2cba2ea6d9b79dbef275bc5ea4036a.zip
cap_net: fix verification of bind permission
MFC after: 5 days
-rw-r--r--lib/libcasper/services/cap_net/cap_net.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/libcasper/services/cap_net/cap_net.c b/lib/libcasper/services/cap_net/cap_net.c
index 5e10714e3614..c6abaa69faf6 100644
--- a/lib/libcasper/services/cap_net/cap_net.c
+++ b/lib/libcasper/services/cap_net/cap_net.c
@@ -1382,7 +1382,7 @@ net_limit(const nvlist_t *oldlimits, const nvlist_t *newlimits)
*/
if (oldlimits == NULL)
return (0);
- if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_BIND))
+ if (!hasbind && nvlist_exists(oldlimits, LIMIT_NV_BIND))
return (ENOTCAPABLE);
if (!hasconnect && nvlist_exists(oldlimits, LIMIT_NV_CONNECT))
return (ENOTCAPABLE);