o Recent addition of (p1==p2) exception in p_candebug() permitted   processes to attach debugging to themselves even though the   global kern_unprivileged_procdebug_permitted policy might disallow   this. o Move the kern_unprivileged_procdebug_permitted check above the   (p1==p2) check.
o Recent addition of (p1==p2) exception in p_candebug() permitted
  processes to attach debugging to themselves even though the
  global kern_unprivileged_procdebug_permitted policy might disallow
  this.
o Move the kern_unprivileged_procdebug_permitted check above the
  (p1==p2) check.

Reviewed by:	des

jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase,jrobhoward/SCADAbase