| mac_bsdextended.c (106469) | mac_bsdextended.c (106648) |
|---|---|
| 1/*- 2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson 3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc. 4 * All rights reserved. 5 * 6 * This software was developed by Robert Watson for the TrustedBSD Project. 7 * 8 * This software was developed for the FreeBSD Project in part by Network --- 17 unchanged lines hidden (view full) --- 26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 * SUCH DAMAGE. 33 * | 1/*- 2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson 3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc. 4 * All rights reserved. 5 * 6 * This software was developed by Robert Watson for the TrustedBSD Project. 7 * 8 * This software was developed for the FreeBSD Project in part by Network --- 17 unchanged lines hidden (view full) --- 26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 * SUCH DAMAGE. 33 * |
| 34 * $FreeBSD: head/sys/security/mac_bsdextended/mac_bsdextended.c 106469 2002-11-05 17:52:42Z rwatson $ | 34 * $FreeBSD: head/sys/security/mac_bsdextended/mac_bsdextended.c 106648 2002-11-08 18:04:36Z rwatson $ |
| 35 */ 36/* 37 * Developed by the TrustedBSD Project. 38 * "BSD Extended" MAC policy, allowing the administrator to impose 39 * mandatory rules regarding users and some system objects. 40 * 41 * XXX: Much locking support required here. 42 */ --- 346 unchanged lines hidden (view full) --- 389 error = VOP_GETATTR(vp, &vap, cred, curthread); 390 if (error) 391 return (error); 392 return (mac_bsdextended_check(cred, vap.va_uid, vap.va_gid, VADMIN)); 393} 394 395static int 396mac_bsdextended_check_vnode_exec(struct ucred *cred, struct vnode *vp, | 35 */ 36/* 37 * Developed by the TrustedBSD Project. 38 * "BSD Extended" MAC policy, allowing the administrator to impose 39 * mandatory rules regarding users and some system objects. 40 * 41 * XXX: Much locking support required here. 42 */ --- 346 unchanged lines hidden (view full) --- 389 error = VOP_GETATTR(vp, &vap, cred, curthread); 390 if (error) 391 return (error); 392 return (mac_bsdextended_check(cred, vap.va_uid, vap.va_gid, VADMIN)); 393} 394 395static int 396mac_bsdextended_check_vnode_exec(struct ucred *cred, struct vnode *vp, |
| 397 struct label *label, struct image_params *imgp) | 397 struct label *label, struct image_params *imgp, 398 struct label *execlabel) |
| 398{ 399 struct vattr vap; 400 int error; 401 402 if (!mac_bsdextended_enabled) 403 return (0); 404 405 error = VOP_GETATTR(vp, &vap, cred, curthread); --- 344 unchanged lines hidden --- | 399{ 400 struct vattr vap; 401 int error; 402 403 if (!mac_bsdextended_enabled) 404 return (0); 405 406 error = VOP_GETATTR(vp, &vap, cred, curthread); --- 344 unchanged lines hidden --- |