diff options
| author | Christian S.J. Peron <csjp@FreeBSD.org> | 2006-08-26 20:13:35 +0000 |
|---|---|---|
| committer | Christian S.J. Peron <csjp@FreeBSD.org> | 2006-08-26 20:13:35 +0000 |
| commit | 9e0d822d771302156061adda7333129ed59b6b88 (patch) | |
| tree | 33c461b943926b78322c2f6d22aee7c43628a531 /sys/security/mac_mls/mac_mls.c | |
| parent | 77b1a4d66af2809eaf8c68cd852d53c52c8329c8 (diff) | |
Notes
Diffstat (limited to 'sys/security/mac_mls/mac_mls.c')
| -rw-r--r-- | sys/security/mac_mls/mac_mls.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/sys/security/mac_mls/mac_mls.c b/sys/security/mac_mls/mac_mls.c index 76e2cdaa485f..b258b21f3c3d 100644 --- a/sys/security/mac_mls/mac_mls.c +++ b/sys/security/mac_mls/mac_mls.c @@ -2788,6 +2788,17 @@ mac_mls_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred, return (0); } +static void +mac_mls_associate_nfsd_label(struct ucred *cred) +{ + struct mac_mls *label; + + label = SLOT(cred->cr_label); + mac_mls_set_effective(label, MAC_MLS_TYPE_LOW, 0, NULL); + mac_mls_set_range(label, MAC_MLS_TYPE_LOW, 0, NULL, + MAC_MLS_TYPE_HIGH, 0, NULL); +} + static struct mac_policy_ops mac_mls_ops = { .mpo_init = mac_mls_init, @@ -2960,6 +2971,7 @@ static struct mac_policy_ops mac_mls_ops = .mpo_check_vnode_setutimes = mac_mls_check_vnode_setutimes, .mpo_check_vnode_stat = mac_mls_check_vnode_stat, .mpo_check_vnode_write = mac_mls_check_vnode_write, + .mpo_associate_nfsd_label = mac_mls_associate_nfsd_label, }; MAC_POLICY_SET(&mac_mls_ops, mac_mls, "TrustedBSD MAC/MLS", |