bsd/vfs/vfs_subr.c

6191 	struct kauth_acl_eval	eval;
6197 		eval.ae_requested = KAUTH_VNODE_DELETE_CHILD;
6198 		eval.ae_acl = &dvap->va_acl->acl_ace[0];
6199 		eval.ae_count = dvap->va_acl->acl_entrycount;
6200 		eval.ae_options = 0;
6202 			eval.ae_options |= KAUTH_AEVAL_IS_OWNER;
6212 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP_UNKNOWN;
6214 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP;
6215 		eval.ae_exp_gall = KAUTH_VNODE_GENERIC_ALL_BITS;
6216 		eval.ae_exp_gread = KAUTH_VNODE_GENERIC_READ_BITS;
6217 		eval.ae_exp_gwrite = KAUTH_VNODE_GENERIC_WRITE_BITS;
6218 		eval.ae_exp_gexec = KAUTH_VNODE_GENERIC_EXECUTE_BITS;
6224 		error = kauth_acl_evaluate(cred, &eval);
6230 		switch(eval.ae_result) {
6249 		eval.ae_requested = KAUTH_VNODE_DELETE;
6250 		eval.ae_acl = &vap->va_acl->acl_ace[0];
6251 		eval.ae_count = vap->va_acl->acl_entrycount;
6252 		eval.ae_options = 0;
6254 			eval.ae_options |= KAUTH_AEVAL_IS_OWNER;
6264 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP_UNKNOWN;
6266 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP;
6267 		eval.ae_exp_gall = KAUTH_VNODE_GENERIC_ALL_BITS;
6268 		eval.ae_exp_gread = KAUTH_VNODE_GENERIC_READ_BITS;
6269 		eval.ae_exp_gwrite = KAUTH_VNODE_GENERIC_WRITE_BITS;
6270 		eval.ae_exp_gexec = KAUTH_VNODE_GENERIC_EXECUTE_BITS;
6272 		if ((error = kauth_acl_evaluate(cred, &eval)) != 0) {
6277 		switch(eval.ae_result) {
6324 	struct kauth_acl_eval	eval;
6355 		eval.ae_requested = acl_rights;
6356 		eval.ae_acl = &vap->va_acl->acl_ace[0];
6357 		eval.ae_count = vap->va_acl->acl_entrycount;
6358 		eval.ae_options = 0;
6360 			eval.ae_options |= KAUTH_AEVAL_IS_OWNER;
6370 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP_UNKNOWN;
6372 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP;
6373 		eval.ae_exp_gall = KAUTH_VNODE_GENERIC_ALL_BITS;
6374 		eval.ae_exp_gread = KAUTH_VNODE_GENERIC_READ_BITS;
6375 		eval.ae_exp_gwrite = KAUTH_VNODE_GENERIC_WRITE_BITS;
6376 		eval.ae_exp_gexec = KAUTH_VNODE_GENERIC_EXECUTE_BITS;
6378 		if ((error = kauth_acl_evaluate(cred, &eval)) != 0) {
6383 		switch(eval.ae_result) {
6397 		*found_deny = eval.ae_found_deny;
6402 		eval.ae_residual = acl_rights;
6408 	eval.ae_residual &= ~preauth_rights;
6414 		eval.ae_residual &= ~KAUTH_VNODE_WRITE_ATTRIBUTES;
6416 	if (eval.ae_residual == 0) {
6427 	if (eval.ae_residual & KAUTH_VNODE_CHANGE_OWNER) {
6431 	if (eval.ae_residual & KAUTH_VNODE_WRITE_SECURITY) {
6437 	if (eval.ae_residual & KAUTH_VNODE_DELETE)
6446 	if (eval.ae_residual & (KAUTH_VNODE_READ_DATA |
6450 	if (eval.ae_residual & (KAUTH_VNODE_WRITE_DATA |
6457 	if (eval.ae_residual & (KAUTH_VNODE_EXECUTE |
6466 		    (eval.ae_residual & KAUTH_VNODE_READ_DATA)
6468 		    (eval.ae_residual & KAUTH_VNODE_WRITE_DATA)
6470 		    (eval.ae_residual & KAUTH_VNODE_EXECUTE)
6472 		    (eval.ae_residual & KAUTH_VNODE_DELETE)
6474 		    (eval.ae_residual & KAUTH_VNODE_APPEND_DATA)
6476 		    (eval.ae_residual & KAUTH_VNODE_DELETE_CHILD)
6478 		    (eval.ae_residual & KAUTH_VNODE_READ_ATTRIBUTES)
6480 		    (eval.ae_residual & KAUTH_VNODE_WRITE_ATTRIBUTES)
6482 		    (eval.ae_residual & KAUTH_VNODE_READ_EXTATTRIBUTES)
6484 		    (eval.ae_residual & KAUTH_VNODE_WRITE_EXTATTRIBUTES)
6486 		    (eval.ae_residual & KAUTH_VNODE_READ_SECURITY)
6488 		    (eval.ae_residual & KAUTH_VNODE_WRITE_SECURITY)
6490 		    (eval.ae_residual & KAUTH_VNODE_CHECKIMMUTABLE)
6492 		    (eval.ae_residual & KAUTH_VNODE_CHANGE_OWNER)