| mac_biba.c (106091) | mac_biba.c (106160) |
|---|---|
| 1/*- 2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson 3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc. 4 * All rights reserved. 5 * 6 * This software was developed by Robert Watson for the TrustedBSD Project. 7 * 8 * This software was developed for the FreeBSD Project in part by NAI Labs, --- 20 unchanged lines hidden (view full) --- 29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 35 * SUCH DAMAGE. 36 * | 1/*- 2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson 3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc. 4 * All rights reserved. 5 * 6 * This software was developed by Robert Watson for the TrustedBSD Project. 7 * 8 * This software was developed for the FreeBSD Project in part by NAI Labs, --- 20 unchanged lines hidden (view full) --- 29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 35 * SUCH DAMAGE. 36 * |
| 37 * $FreeBSD: head/sys/security/mac_biba/mac_biba.c 106091 2002-10-28 19:18:29Z rwatson $ | 37 * $FreeBSD: head/sys/security/mac_biba/mac_biba.c 106160 2002-10-29 19:14:16Z rwatson $ |
| 38 */ 39 40/* 41 * Developed by the TrustedBSD Project. 42 * Biba fixed label mandatory integrity policy. 43 */ 44 45#include <sys/types.h> --- 1478 unchanged lines hidden (view full) --- 1524 * If there is a Biba label update for the interface, it may 1525 * be an update of the single, range, or both. 1526 */ 1527 error = biba_atmostflags(new, MAC_BIBA_FLAGS_BOTH); 1528 if (error) 1529 return (error); 1530 1531 /* | 38 */ 39 40/* 41 * Developed by the TrustedBSD Project. 42 * Biba fixed label mandatory integrity policy. 43 */ 44 45#include <sys/types.h> --- 1478 unchanged lines hidden (view full) --- 1524 * If there is a Biba label update for the interface, it may 1525 * be an update of the single, range, or both. 1526 */ 1527 error = biba_atmostflags(new, MAC_BIBA_FLAGS_BOTH); 1528 if (error) 1529 return (error); 1530 1531 /* |
| 1532 * Relabling network interfaces requires Biba privilege. 1533 */ 1534 error = mac_biba_subject_privileged(subj); 1535 if (error) 1536 return (error); 1537 1538 /* |
|
| 1532 * If the Biba label is to be changed, authorize as appropriate. 1533 */ 1534 if (new->mb_flags & MAC_BIBA_FLAGS_BOTH) { 1535 /* 1536 * Rely on the traditional superuser status for the Biba 1537 * interface relabel requirements. XXXMAC: This will go 1538 * away. 1539 */ --- 1172 unchanged lines hidden --- | 1539 * If the Biba label is to be changed, authorize as appropriate. 1540 */ 1541 if (new->mb_flags & MAC_BIBA_FLAGS_BOTH) { 1542 /* 1543 * Rely on the traditional superuser status for the Biba 1544 * interface relabel requirements. XXXMAC: This will go 1545 * away. 1546 */ --- 1172 unchanged lines hidden --- |