summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2002-09-21 19:26:59 +0000
committerRobert Watson <rwatson@FreeBSD.org>2002-09-21 19:26:59 +0000
commit5784b0a22d4a4440b41713ffb79c07735a612688 (patch)
treeb712960144ece69324bf0d8371ab904cb3403e01
parent13763f507474fac1023bc245482247f97b01efe2 (diff)
Notes
-rw-r--r--sys/security/mac_biba/mac_biba.c26
-rw-r--r--sys/security/mac_mls/mac_mls.c20
2 files changed, 23 insertions, 23 deletions
diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c
index cdf4698ad347..fcd76adb0366 100644
--- a/sys/security/mac_biba/mac_biba.c
+++ b/sys/security/mac_biba/mac_biba.c
@@ -1230,18 +1230,18 @@ mac_biba_check_ifnet_relabel(struct ucred *cred, struct ifnet *ifnet,
return (suser_cred(cred, 0));
}
-static int
+static int
mac_biba_check_ifnet_transmit(struct ifnet *ifnet, struct label *ifnetlabel,
struct mbuf *m, struct label *mbuflabel)
{
struct mac_biba *p, *i;
-
+
if (!mac_biba_enabled)
return (0);
p = SLOT(mbuflabel);
i = SLOT(ifnetlabel);
-
+
return (mac_biba_single_in_range(p, i) ? 0 : EACCES);
}
@@ -1267,7 +1267,7 @@ static int
mac_biba_check_pipe_ioctl(struct ucred *cred, struct pipe *pipe,
struct label *pipelabel, unsigned long cmd, void /* caddr_t */ *data)
{
-
+
if(!mac_biba_enabled)
return (0);
@@ -1406,13 +1406,13 @@ static int
mac_biba_check_proc_sched(struct ucred *cred, struct proc *proc)
{
struct mac_biba *subj, *obj;
-
+
if (!mac_biba_enabled)
return (0);
subj = SLOT(&cred->cr_label);
obj = SLOT(&proc->p_ucred->cr_label);
-
+
/* XXX: range checks */
if (!mac_biba_dominate_single(obj, subj))
return (ESRCH);
@@ -1426,13 +1426,13 @@ static int
mac_biba_check_proc_signal(struct ucred *cred, struct proc *proc, int signum)
{
struct mac_biba *subj, *obj;
-
+
if (!mac_biba_enabled)
return (0);
subj = SLOT(&cred->cr_label);
obj = SLOT(&proc->p_ucred->cr_label);
-
+
/* XXX: range checks */
if (!mac_biba_dominate_single(obj, subj))
return (ESRCH);
@@ -1665,21 +1665,21 @@ mac_biba_check_vnode_getextattr(struct ucred *cred, struct vnode *vp,
}
static int
-mac_biba_check_vnode_lookup(struct ucred *cred, struct vnode *dvp,
+mac_biba_check_vnode_lookup(struct ucred *cred, struct vnode *dvp,
struct label *dlabel, struct componentname *cnp)
{
struct mac_biba *subj, *obj;
-
+
if (!mac_biba_enabled)
return (0);
-
+
subj = SLOT(&cred->cr_label);
obj = SLOT(dlabel);
-
+
if (!mac_biba_dominate_single(obj, subj))
return (EACCES);
- return (0);
+ return (0);
}
static int
diff --git a/sys/security/mac_mls/mac_mls.c b/sys/security/mac_mls/mac_mls.c
index cd17fdf1110e..60675dd15268 100644
--- a/sys/security/mac_mls/mac_mls.c
+++ b/sys/security/mac_mls/mac_mls.c
@@ -1226,7 +1226,7 @@ static int
mac_mls_check_pipe_ioctl(struct ucred *cred, struct pipe *pipe,
struct label *pipelabel, unsigned long cmd, void /* caddr_t */ *data)
{
-
+
if(!mac_mls_enabled)
return (0);
@@ -1365,13 +1365,13 @@ static int
mac_mls_check_proc_sched(struct ucred *cred, struct proc *proc)
{
struct mac_mls *subj, *obj;
-
+
if (!mac_mls_enabled)
return (0);
subj = SLOT(&cred->cr_label);
obj = SLOT(&proc->p_ucred->cr_label);
-
+
/* XXX: range checks */
if (!mac_mls_dominate_single(subj, obj))
return (ESRCH);
@@ -1385,13 +1385,13 @@ static int
mac_mls_check_proc_signal(struct ucred *cred, struct proc *proc, int signum)
{
struct mac_mls *subj, *obj;
-
+
if (!mac_mls_enabled)
return (0);
subj = SLOT(&cred->cr_label);
obj = SLOT(&proc->p_ucred->cr_label);
-
+
/* XXX: range checks */
if (!mac_mls_dominate_single(subj, obj))
return (ESRCH);
@@ -1627,21 +1627,21 @@ mac_mls_check_vnode_getextattr(struct ucred *cred, struct vnode *vp,
}
static int
-mac_mls_check_vnode_lookup(struct ucred *cred, struct vnode *dvp,
+mac_mls_check_vnode_lookup(struct ucred *cred, struct vnode *dvp,
struct label *dlabel, struct componentname *cnp)
{
struct mac_mls *subj, *obj;
-
+
if (!mac_mls_enabled)
return (0);
-
+
subj = SLOT(&cred->cr_label);
obj = SLOT(dlabel);
-
+
if (!mac_mls_dominate_single(subj, obj))
return (EACCES);
- return (0);
+ return (0);
}
static int