cvs commit: src/sys/security/mac_bsdextended mac_bsdextended.c

[David Malone]

dwmalone    2006-03-04 20:47:19 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac_bsdextended mac_bsdextended.c 
  Log:
  Create a mac_bsdextended_check_vp function that takes a cred, a
  vnode and a mode and checks if a given access mode is permitted.
  This centralises the mac_bsdextended_enabled check and the GETATTR
  calls and makes the implementation of the mac policy methods simple.
  
  This should make it easier for us to match vnodes on more complex
  attributes than just uid and gid in the future, but for now there
  should be no functional change.
  
  Approved/Reviewed by:   rwatson, trhodes
  MFC after:      1 month
  
  Revision  Changes    Path
  1.28      +43 -280   src/sys/security/mac_bsdextended/mac_bsdextended.c