PERFORCE change 109949 for review

[Todd Miller]

http://perforce.freebsd.org/chv.cgi?CH=109949

Change 109949 by millert at millert_g5tower on 2006/11/14 18:26:45

	Add sebsd_vnode_check_truncate(), currently the same as
	sebsd_vnode_check_write().  This is consistent with the
	checks in SELinux.

Affected files ...

.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/sedarwin/sebsd.c#33 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/sedarwin/sebsd.c#33 (text+ko) ====

@@ -2875,6 +2875,14 @@
 }
 
 static int
+sebsd_vnode_check_truncate(struct ucred *cred, struct ucred *file_cred,
+    struct vnode *vp, struct label *label)
+{
+
+	return (vnode_has_perm(cred, vp, NULL, FILE__WRITE));
+}
+
+static int
 sebsd_vnode_check_write(struct ucred *cred, struct ucred *file_cred,
     struct vnode *vp, struct label *label)
 {