34c34
< * $FreeBSD: head/sys/security/mac_mls/mac_mls.c 106469 2002-11-05 17:52:42Z rwatson $
---
> * $FreeBSD: head/sys/security/mac_mls/mac_mls.c 106648 2002-11-08 18:04:36Z rwatson $
1865c1865,1866
< struct label *label, struct image_params *imgp)
---
> struct label *label, struct image_params *imgp,
> struct label *execlabel)
1867c1868,1869
< struct mac_mls *subj, *obj;
---
> struct mac_mls *subj, *obj, *exec;
> int error;
1868a1871,1882
> if (execlabel != NULL) {
> /*
> * We currently don't permit labels to be changed at
> * exec-time as part of MLS, so disallow non-NULL
> * MLS label elements in the execlabel.
> */
> exec = SLOT(execlabel);
> error = mls_atmostflags(exec, 0);
> if (error)
> return (error);
> }
>