| mac_priv.c (189503) | mac_priv.c (189797) |
|---|---|
| 1/*- 2 * Copyright (c) 2006 nCircle Network Security, Inc. 3 * Copyright (c) 2009 Robert N. M. Watson 4 * All rights reserved. 5 * 6 * This software was developed by Robert N. M. Watson for the TrustedBSD 7 * Project under contract to nCircle Network Security, Inc. 8 * --- 22 unchanged lines hidden (view full) --- 31 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34/* 35 * MAC checks for system privileges. 36 */ 37 38#include "sys/cdefs.h" | 1/*- 2 * Copyright (c) 2006 nCircle Network Security, Inc. 3 * Copyright (c) 2009 Robert N. M. Watson 4 * All rights reserved. 5 * 6 * This software was developed by Robert N. M. Watson for the TrustedBSD 7 * Project under contract to nCircle Network Security, Inc. 8 * --- 22 unchanged lines hidden (view full) --- 31 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34/* 35 * MAC checks for system privileges. 36 */ 37 38#include "sys/cdefs.h" |
| 39__FBSDID("$FreeBSD: head/sys/security/mac/mac_priv.c 189503 2009-03-08 00:50:37Z rwatson $"); | 39__FBSDID("$FreeBSD: head/sys/security/mac/mac_priv.c 189797 2009-03-14 16:06:06Z rwatson $"); |
| 40 41#include "opt_kdtrace.h" 42#include "opt_mac.h" 43 44#include <sys/param.h> 45#include <sys/kernel.h> 46#include <sys/priv.h> 47#include <sys/sdt.h> --- 19 unchanged lines hidden (view full) --- 67 * Restrict access to a privilege for a credential. Return failure if any 68 * policy denies access. 69 */ 70int 71mac_priv_check(struct ucred *cred, int priv) 72{ 73 int error; 74 | 40 41#include "opt_kdtrace.h" 42#include "opt_mac.h" 43 44#include <sys/param.h> 45#include <sys/kernel.h> 46#include <sys/priv.h> 47#include <sys/sdt.h> --- 19 unchanged lines hidden (view full) --- 67 * Restrict access to a privilege for a credential. Return failure if any 68 * policy denies access. 69 */ 70int 71mac_priv_check(struct ucred *cred, int priv) 72{ 73 int error; 74 |
| 75 MAC_CHECK(priv_check, cred, priv); | 75 MAC_CHECK_NOSLEEP(priv_check, cred, priv); |
| 76 MAC_CHECK_PROBE2(priv_check, error, cred, priv); 77 78 return (error); 79} 80 81MAC_GRANT_PROBE_DEFINE2(priv_grant, "struct ucred *", "int"); 82 83/* 84 * Grant access to a privilege for a credential. Return success if any 85 * policy grants access. 86 */ 87int 88mac_priv_grant(struct ucred *cred, int priv) 89{ 90 int error; 91 | 76 MAC_CHECK_PROBE2(priv_check, error, cred, priv); 77 78 return (error); 79} 80 81MAC_GRANT_PROBE_DEFINE2(priv_grant, "struct ucred *", "int"); 82 83/* 84 * Grant access to a privilege for a credential. Return success if any 85 * policy grants access. 86 */ 87int 88mac_priv_grant(struct ucred *cred, int priv) 89{ 90 int error; 91 |
| 92 MAC_GRANT(priv_grant, cred, priv); | 92 MAC_GRANT_NOSLEEP(priv_grant, cred, priv); |
| 93 MAC_GRANT_PROBE2(priv_grant, error, cred, priv); 94 95 return (error); 96} | 93 MAC_GRANT_PROBE2(priv_grant, error, cred, priv); 94 95 return (error); 96} |