diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2002-09-21 19:26:59 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2002-09-21 19:26:59 +0000 |
| commit | 5784b0a22d4a4440b41713ffb79c07735a612688 (patch) | |
| tree | b712960144ece69324bf0d8371ab904cb3403e01 | |
| parent | 13763f507474fac1023bc245482247f97b01efe2 (diff) | |
Notes
| -rw-r--r-- | sys/security/mac_biba/mac_biba.c | 26 | ||||
| -rw-r--r-- | sys/security/mac_mls/mac_mls.c | 20 |
2 files changed, 23 insertions, 23 deletions
diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c index cdf4698ad347..fcd76adb0366 100644 --- a/sys/security/mac_biba/mac_biba.c +++ b/sys/security/mac_biba/mac_biba.c @@ -1230,18 +1230,18 @@ mac_biba_check_ifnet_relabel(struct ucred *cred, struct ifnet *ifnet, return (suser_cred(cred, 0)); } -static int +static int mac_biba_check_ifnet_transmit(struct ifnet *ifnet, struct label *ifnetlabel, struct mbuf *m, struct label *mbuflabel) { struct mac_biba *p, *i; - + if (!mac_biba_enabled) return (0); p = SLOT(mbuflabel); i = SLOT(ifnetlabel); - + return (mac_biba_single_in_range(p, i) ? 0 : EACCES); } @@ -1267,7 +1267,7 @@ static int mac_biba_check_pipe_ioctl(struct ucred *cred, struct pipe *pipe, struct label *pipelabel, unsigned long cmd, void /* caddr_t */ *data) { - + if(!mac_biba_enabled) return (0); @@ -1406,13 +1406,13 @@ static int mac_biba_check_proc_sched(struct ucred *cred, struct proc *proc) { struct mac_biba *subj, *obj; - + if (!mac_biba_enabled) return (0); subj = SLOT(&cred->cr_label); obj = SLOT(&proc->p_ucred->cr_label); - + /* XXX: range checks */ if (!mac_biba_dominate_single(obj, subj)) return (ESRCH); @@ -1426,13 +1426,13 @@ static int mac_biba_check_proc_signal(struct ucred *cred, struct proc *proc, int signum) { struct mac_biba *subj, *obj; - + if (!mac_biba_enabled) return (0); subj = SLOT(&cred->cr_label); obj = SLOT(&proc->p_ucred->cr_label); - + /* XXX: range checks */ if (!mac_biba_dominate_single(obj, subj)) return (ESRCH); @@ -1665,21 +1665,21 @@ mac_biba_check_vnode_getextattr(struct ucred *cred, struct vnode *vp, } static int -mac_biba_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, +mac_biba_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, struct label *dlabel, struct componentname *cnp) { struct mac_biba *subj, *obj; - + if (!mac_biba_enabled) return (0); - + subj = SLOT(&cred->cr_label); obj = SLOT(dlabel); - + if (!mac_biba_dominate_single(obj, subj)) return (EACCES); - return (0); + return (0); } static int diff --git a/sys/security/mac_mls/mac_mls.c b/sys/security/mac_mls/mac_mls.c index cd17fdf1110e..60675dd15268 100644 --- a/sys/security/mac_mls/mac_mls.c +++ b/sys/security/mac_mls/mac_mls.c @@ -1226,7 +1226,7 @@ static int mac_mls_check_pipe_ioctl(struct ucred *cred, struct pipe *pipe, struct label *pipelabel, unsigned long cmd, void /* caddr_t */ *data) { - + if(!mac_mls_enabled) return (0); @@ -1365,13 +1365,13 @@ static int mac_mls_check_proc_sched(struct ucred *cred, struct proc *proc) { struct mac_mls *subj, *obj; - + if (!mac_mls_enabled) return (0); subj = SLOT(&cred->cr_label); obj = SLOT(&proc->p_ucred->cr_label); - + /* XXX: range checks */ if (!mac_mls_dominate_single(subj, obj)) return (ESRCH); @@ -1385,13 +1385,13 @@ static int mac_mls_check_proc_signal(struct ucred *cred, struct proc *proc, int signum) { struct mac_mls *subj, *obj; - + if (!mac_mls_enabled) return (0); subj = SLOT(&cred->cr_label); obj = SLOT(&proc->p_ucred->cr_label); - + /* XXX: range checks */ if (!mac_mls_dominate_single(subj, obj)) return (ESRCH); @@ -1627,21 +1627,21 @@ mac_mls_check_vnode_getextattr(struct ucred *cred, struct vnode *vp, } static int -mac_mls_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, +mac_mls_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, struct label *dlabel, struct componentname *cnp) { struct mac_mls *subj, *obj; - + if (!mac_mls_enabled) return (0); - + subj = SLOT(&cred->cr_label); obj = SLOT(dlabel); - + if (!mac_mls_dominate_single(subj, obj)) return (EACCES); - return (0); + return (0); } static int |
