PT-2026-108923

A missing authorization check in the illumos zones statistics daemon zonestatd allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsd server in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the ZS...