svn commit: r201438 - head/sys/security/mac_lomac

Edward Tomasz Napierala trasz at FreeBSD.org
Sun Jan 3 17:19:14 UTC 2010


Author: trasz
Date: Sun Jan  3 17:19:14 2010
New Revision: 201438
URL: http://svn.freebsd.org/changeset/base/201438

Log:
  Make mac_lomac(4) able to interpret NFSv4 access bits.
  
  Reviewed by:	rwatson

Modified:
  head/sys/security/mac_lomac/mac_lomac.c

Modified: head/sys/security/mac_lomac/mac_lomac.c
==============================================================================
--- head/sys/security/mac_lomac/mac_lomac.c	Sun Jan  3 17:19:04 2010	(r201437)
+++ head/sys/security/mac_lomac/mac_lomac.c	Sun Jan  3 17:19:14 2010	(r201438)
@@ -2470,7 +2470,7 @@ lomac_vnode_check_open(struct ucred *cre
 	obj = SLOT(vplabel);
 
 	/* XXX privilege override for admin? */
-	if (accmode & (VWRITE | VAPPEND | VADMIN)) {
+	if (accmode & VMODIFY_PERMS) {
 		if (!lomac_subject_dominate(subj, obj))
 			return (EACCES);
 	}


More information about the svn-src-all mailing list