bsd/vfs/vfs_subr.c

6428 	struct kauth_acl_eval	eval;
6434 		eval.ae_requested = KAUTH_VNODE_DELETE_CHILD;
6435 		eval.ae_acl = &dvap->va_acl->acl_ace[0];
6436 		eval.ae_count = dvap->va_acl->acl_entrycount;
6437 		eval.ae_options = 0;
6439 			eval.ae_options |= KAUTH_AEVAL_IS_OWNER;
6449 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP_UNKNOWN;
6451 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP;
6452 		eval.ae_exp_gall = KAUTH_VNODE_GENERIC_ALL_BITS;
6453 		eval.ae_exp_gread = KAUTH_VNODE_GENERIC_READ_BITS;
6454 		eval.ae_exp_gwrite = KAUTH_VNODE_GENERIC_WRITE_BITS;
6455 		eval.ae_exp_gexec = KAUTH_VNODE_GENERIC_EXECUTE_BITS;
6461 		error = kauth_acl_evaluate(cred, &eval);
6467 		switch(eval.ae_result) {
6486 		eval.ae_requested = KAUTH_VNODE_DELETE;
6487 		eval.ae_acl = &vap->va_acl->acl_ace[0];
6488 		eval.ae_count = vap->va_acl->acl_entrycount;
6489 		eval.ae_options = 0;
6491 			eval.ae_options |= KAUTH_AEVAL_IS_OWNER;
6501 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP_UNKNOWN;
6503 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP;
6504 		eval.ae_exp_gall = KAUTH_VNODE_GENERIC_ALL_BITS;
6505 		eval.ae_exp_gread = KAUTH_VNODE_GENERIC_READ_BITS;
6506 		eval.ae_exp_gwrite = KAUTH_VNODE_GENERIC_WRITE_BITS;
6507 		eval.ae_exp_gexec = KAUTH_VNODE_GENERIC_EXECUTE_BITS;
6509 		if ((error = kauth_acl_evaluate(cred, &eval)) != 0) {
6514 		switch(eval.ae_result) {
6561 	struct kauth_acl_eval	eval;
6592 		eval.ae_requested = acl_rights;
6593 		eval.ae_acl = &vap->va_acl->acl_ace[0];
6594 		eval.ae_count = vap->va_acl->acl_entrycount;
6595 		eval.ae_options = 0;
6597 			eval.ae_options |= KAUTH_AEVAL_IS_OWNER;
6607 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP_UNKNOWN;
6609 			eval.ae_options |= KAUTH_AEVAL_IN_GROUP;
6610 		eval.ae_exp_gall = KAUTH_VNODE_GENERIC_ALL_BITS;
6611 		eval.ae_exp_gread = KAUTH_VNODE_GENERIC_READ_BITS;
6612 		eval.ae_exp_gwrite = KAUTH_VNODE_GENERIC_WRITE_BITS;
6613 		eval.ae_exp_gexec = KAUTH_VNODE_GENERIC_EXECUTE_BITS;
6615 		if ((error = kauth_acl_evaluate(cred, &eval)) != 0) {
6620 		switch(eval.ae_result) {
6634 		*found_deny = eval.ae_found_deny;
6639 		eval.ae_residual = acl_rights;
6645 	eval.ae_residual &= ~preauth_rights;
6651 		eval.ae_residual &= ~KAUTH_VNODE_WRITE_ATTRIBUTES;
6653 	if (eval.ae_residual == 0) {
6664 	if (eval.ae_residual & KAUTH_VNODE_CHANGE_OWNER) {
6668 	if (eval.ae_residual & KAUTH_VNODE_WRITE_SECURITY) {
6674 	if (eval.ae_residual & KAUTH_VNODE_DELETE)
6683 	if (eval.ae_residual & (KAUTH_VNODE_READ_DATA |
6687 	if (eval.ae_residual & (KAUTH_VNODE_WRITE_DATA |
6694 	if (eval.ae_residual & (KAUTH_VNODE_EXECUTE |
6703 		    (eval.ae_residual & KAUTH_VNODE_READ_DATA)
6705 		    (eval.ae_residual & KAUTH_VNODE_WRITE_DATA)
6707 		    (eval.ae_residual & KAUTH_VNODE_EXECUTE)
6709 		    (eval.ae_residual & KAUTH_VNODE_DELETE)
6711 		    (eval.ae_residual & KAUTH_VNODE_APPEND_DATA)
6713 		    (eval.ae_residual & KAUTH_VNODE_DELETE_CHILD)
6715 		    (eval.ae_residual & KAUTH_VNODE_READ_ATTRIBUTES)
6717 		    (eval.ae_residual & KAUTH_VNODE_WRITE_ATTRIBUTES)
6719 		    (eval.ae_residual & KAUTH_VNODE_READ_EXTATTRIBUTES)
6721 		    (eval.ae_residual & KAUTH_VNODE_WRITE_EXTATTRIBUTES)
6723 		    (eval.ae_residual & KAUTH_VNODE_READ_SECURITY)
6725 		    (eval.ae_residual & KAUTH_VNODE_WRITE_SECURITY)
6727 		    (eval.ae_residual & KAUTH_VNODE_CHECKIMMUTABLE)
6729 		    (eval.ae_residual & KAUTH_VNODE_CHANGE_OWNER)