diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2002-09-21 19:26:59 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2002-09-21 19:26:59 +0000 |
| commit | 5784b0a22d4a4440b41713ffb79c07735a612688 (patch) | |
| tree | b712960144ece69324bf0d8371ab904cb3403e01 /sys/security/mac_mls | |
| parent | 13763f507474fac1023bc245482247f97b01efe2 (diff) | |
Notes
Diffstat (limited to 'sys/security/mac_mls')
| -rw-r--r-- | sys/security/mac_mls/mac_mls.c | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/sys/security/mac_mls/mac_mls.c b/sys/security/mac_mls/mac_mls.c index cd17fdf1110e..60675dd15268 100644 --- a/sys/security/mac_mls/mac_mls.c +++ b/sys/security/mac_mls/mac_mls.c @@ -1226,7 +1226,7 @@ static int mac_mls_check_pipe_ioctl(struct ucred *cred, struct pipe *pipe, struct label *pipelabel, unsigned long cmd, void /* caddr_t */ *data) { - + if(!mac_mls_enabled) return (0); @@ -1365,13 +1365,13 @@ static int mac_mls_check_proc_sched(struct ucred *cred, struct proc *proc) { struct mac_mls *subj, *obj; - + if (!mac_mls_enabled) return (0); subj = SLOT(&cred->cr_label); obj = SLOT(&proc->p_ucred->cr_label); - + /* XXX: range checks */ if (!mac_mls_dominate_single(subj, obj)) return (ESRCH); @@ -1385,13 +1385,13 @@ static int mac_mls_check_proc_signal(struct ucred *cred, struct proc *proc, int signum) { struct mac_mls *subj, *obj; - + if (!mac_mls_enabled) return (0); subj = SLOT(&cred->cr_label); obj = SLOT(&proc->p_ucred->cr_label); - + /* XXX: range checks */ if (!mac_mls_dominate_single(subj, obj)) return (ESRCH); @@ -1627,21 +1627,21 @@ mac_mls_check_vnode_getextattr(struct ucred *cred, struct vnode *vp, } static int -mac_mls_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, +mac_mls_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, struct label *dlabel, struct componentname *cnp) { struct mac_mls *subj, *obj; - + if (!mac_mls_enabled) return (0); - + subj = SLOT(&cred->cr_label); obj = SLOT(dlabel); - + if (!mac_mls_dominate_single(subj, obj)) return (EACCES); - return (0); + return (0); } static int |
