Date: Sun, 28 Jul 2002 19:44:36 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 15093 for review Message-ID: <200207290244.g6T2iaUu043908@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=15093 Change 15093 by rwatson@rwatson_paprika on 2002/07/28 19:44:30 Move vnode_op check to join the rest of the access control check entry points. Affected files ... .. //depot/projects/trustedbsd/mac/sys/kern/kern_mac.c#212 edit Differences ... ==== //depot/projects/trustedbsd/mac/sys/kern/kern_mac.c#212 (text+ko) ==== @@ -1858,6 +1858,25 @@ } int +mac_check_vnode_op(struct ucred *cred, struct vnode *vp, int op) +{ + int error; + + if (!mac_enforce_fs) + return (0); + + ASSERT_VOP_LOCKED(vp, "mac_check_vnode_op"); + + error = vn_refreshlabel(vp, cred); + if (error) + return (error); + + MAC_CHECK(check_vnode_op, cred, vp, &vp->v_label, op); + + return (error); +} + +int mac_check_vnode_open(struct ucred *cred, struct vnode *vp, mode_t acc_mode) { int error; @@ -2674,25 +2693,6 @@ } int -mac_check_vnode_op(struct ucred *cred, struct vnode *vp, int op) -{ - int error; - - if (!mac_enforce_fs) - return (0); - - ASSERT_VOP_LOCKED(vp, "mac_check_vnode_op"); - - error = vn_refreshlabel(vp, cred); - if (error) - return (error); - - MAC_CHECK(check_vnode_op, cred, vp, &vp->v_label, op); - - return (error); -} - -int mac_setsockopt_label_set(struct ucred *cred, struct socket *so, struct mac *extmac) { To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207290244.g6T2iaUu043908>