unp_connect() - Use euid/egid for access checks via VOP_EACCESS().

Fixes socket access for set[ug]id applications by using the euid/egid
rather than the uid/gid.

Reported-By: Tim Darby <t+dfbsd@timdarby.net>

diff --git a/sys/kern/uipc_usrreq.c b/sys/kern/uipc_usrreq.c
index 3421e0c..b3c9986 100644 (file)
--- a/sys/kern/uipc_usrreq.c
+++ b/sys/kern/uipc_usrreq.c
@@ -868,7 +868,7 @@ unp_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
                error = ENOTSOCK;
                goto bad;
        }
-       error = VOP_ACCESS(vp, VWRITE, p->p_ucred);
+       error = VOP_EACCESS(vp, VWRITE, p->p_ucred);
        if (error)
                goto bad;
        so2 = vp->v_socket;