summaryrefslogtreecommitdiff
path: root/usr/src/cmd/zonecfg/zonecfg.c
diff options
context:
space:
mode:
Diffstat (limited to 'usr/src/cmd/zonecfg/zonecfg.c')
-rw-r--r--usr/src/cmd/zonecfg/zonecfg.c15
1 files changed, 15 insertions, 0 deletions
diff --git a/usr/src/cmd/zonecfg/zonecfg.c b/usr/src/cmd/zonecfg/zonecfg.c
index dcd1d42a42..384121a589 100644
--- a/usr/src/cmd/zonecfg/zonecfg.c
+++ b/usr/src/cmd/zonecfg/zonecfg.c
@@ -21,6 +21,7 @@
/*
* Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
+ * Copyright 2014 Nexenta Systems, Inc. All rights reserved.
* Copyright 2013, Joyent Inc. All rights reserved.
*/
@@ -6212,6 +6213,8 @@ verify_func(cmd_t *cmd)
char brand[MAXNAMELEN];
char hostidp[HW_HOSTID_LEN];
char fsallowedp[ZONE_FS_ALLOWED_MAX];
+ priv_set_t *privs;
+ char *privname = NULL;
int err, ret_val = Z_OK, arg;
int pset_res;
boolean_t save = B_FALSE;
@@ -6279,6 +6282,18 @@ verify_func(cmd_t *cmd)
saw_error = B_TRUE;
}
+ if ((privs = priv_allocset()) == NULL) {
+ zerr(gettext("%s: priv_allocset failed"), zone);
+ return;
+ }
+ if (zonecfg_get_privset(handle, privs, &privname) != Z_OK) {
+ zerr(gettext("%s: invalid privilege: %s"), zone, privname);
+ priv_freeset(privs);
+ free(privname);
+ return;
+ }
+ priv_freeset(privs);
+
if (zonecfg_get_hostid(handle, hostidp,
sizeof (hostidp)) == Z_INVALID_PROPERTY) {
zerr(gettext("%s: invalid hostid: %s"),