PERFORCE change 229436 for review

[Robert Watson]

http://p4web.freebsd.org/@@229436?ac=10

Change 229436 by rwatson at rwatson_cinnamon on 2013/06/06 22:26:50

	Submit a change dating to the last pass at TESLA assertions for
	VFS: use system call start/stop rather than trap start/stop for
	VFS access-control assertions to (for now) avoid checks against
	page faults.

Affected files ...

.. //depot/projects/ctsrd/tesla/src/sys/ufs/ffs/ffs_vnops.c#6 edit

Differences ...

==== //depot/projects/ctsrd/tesla/src/sys/ufs/ffs/ffs_vnops.c#6 (text+ko) ====

@@ -414,7 +414,7 @@
  * XXXRW: It would be nice if we didn't have to do this.
  */
 #include <security/mac/mac_framework.h>
-void	trap(struct trapframe *frame);
+#include <sys/sysent.h>
 #endif
 
 /*
@@ -443,8 +443,8 @@
 	int ioflag;
 
 	vp = ap->a_vp;
-	TESLA_WITHIN(trap, previously(mac_vnode_check_read(ANY(ptr), ANY(ptr),
-	    vp) == 0));
+	TESLA_SYSCALL(previously(mac_vnode_check_read(ANY(ptr), ANY(ptr), vp)
+	    == 0));
 
 	uio = ap->a_uio;
 	ioflag = ap->a_ioflag;
@@ -667,8 +667,8 @@
 	int blkoffset, error, flags, ioflag, size, xfersize;
 
 	vp = ap->a_vp;
-	TESLA_WITHIN(trap, previously(mac_vnode_check_write(ANY(ptr),
-	    ANY(ptr), vp) == 0));
+	TESLA_SYSCALL(previously(mac_vnode_check_write(ANY(ptr), ANY(ptr), vp)
+	    == 0));
 
 	uio = ap->a_uio;
 	ioflag = ap->a_ioflag;