diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2002-11-04 15:13:36 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2002-11-04 15:13:36 +0000 |
| commit | e5e820fd1f9a5d788798072f1d2a60f7cc798f70 (patch) | |
| tree | 2f3ad50bb20fd5ec86fb6ebe751e49c2a3679686 /sys/security/mac/mac_framework.c | |
| parent | d5e4b2427aabdb68ed0035776593ea35aa91dfb5 (diff) | |
Notes
Diffstat (limited to 'sys/security/mac/mac_framework.c')
| -rw-r--r-- | sys/security/mac/mac_framework.c | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c index d36fbea5096c..64b6f09ad5b7 100644 --- a/sys/security/mac/mac_framework.c +++ b/sys/security/mac/mac_framework.c @@ -2470,6 +2470,37 @@ mac_check_socket_visible(struct ucred *cred, struct socket *socket) } int +mac_check_system_acct(struct ucred *cred, struct vnode *vp) +{ + int error; + + if (vp != NULL) { + ASSERT_VOP_LOCKED(vp, "mac_check_system_acct"); + } + + if (!mac_enforce_system) + return (0); + + MAC_CHECK(check_system_acct, cred, vp, + vp != NULL ? &vp->v_label : NULL); + + return (error); +} + +int +mac_check_system_nfsd(struct ucred *cred) +{ + int error; + + if (!mac_enforce_system) + return (0); + + MAC_CHECK(check_system_nfsd, cred); + + return (error); +} + +int mac_check_system_reboot(struct ucred *cred, int howto) { int error; |
