Date: Sat, 1 Jun 2002 20:09:06 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 12285 for review Message-ID: <200206020309.g52396J78851@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=12285 Change 12285 by rwatson@rwatson_curry on 2002/06/01 20:08:16 Implement socket receiving mbuf security check. Affected files ... ... //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#45 edit Differences ... ==== //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#45 (text+ko) ==== @@ -1621,8 +1621,15 @@ mac_biba_socket_check_receive_mbuf(struct socket *so, struct label *socketlabel, struct mbuf *m, struct label *mbuflabel) { + struct mac_biba *p, *s; - return (0); + if (!mac_biba_enabled) + return (0); + + p = SLOT(mbuflabel); + s = SLOT(socketlabel); + + return (mac_biba_equal_single(p, s) ? 0 : EACCES); } static struct mac_policy_op_entry mac_biba_ops[] = To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200206020309.g52396J78851>