git: 3a95d9255a65 - stable/15 - MAC/do: Executable paths: Accept an empty string

From: Olivier Certner <olce_at_FreeBSD.org>
Date: Mon, 29 Jun 2026 19:25:40 UTC
The branch stable/15 has been updated by olce:

URL: https://cgit.FreeBSD.org/src/commit/?id=3a95d9255a654802937bacff7ba8db11de6cb99d

commit 3a95d9255a654802937bacff7ba8db11de6cb99d
Author:     Olivier Certner <olce@FreeBSD.org>
AuthorDate: 2026-04-28 13:37:50 +0000
Commit:     Olivier Certner <olce@FreeBSD.org>
CommitDate: 2026-06-29 19:23:40 +0000

    MAC/do: Executable paths: Accept an empty string
    
    This effectively allows to disable mac_do(4) by setting the executable
    paths to an empty string, realizing a symmetry with rules to be
    leveraged in subsequent commits.
    
    Reviewed by:    bapt
    Fixes:          9818224174c4 ("MAC/do: Executable paths feature (GSoC 2025's final state)")
    MFC after:      1 month
    Sponsored by:   The FreeBSD Foundation
    Pull Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/38
    
    (cherry picked from commit 3a4433425e63f88e70078a354bd404d7ea6ca3ce)
---
 sys/security/mac_do/mac_do.c | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/sys/security/mac_do/mac_do.c b/sys/security/mac_do/mac_do.c
index 84c7e875af73..e31ba6904bde 100644
--- a/sys/security/mac_do/mac_do.c
+++ b/sys/security/mac_do/mac_do.c
@@ -1153,12 +1153,6 @@ parse_exec_paths(const char *const string, struct exec_paths *const exec_paths,
 		exec_paths->exec_path_count++;
 	}
 
-	if (exec_paths->exec_path_count == 0) {
-		make_parse_error(parse_error, 0, "No valid exec paths found");
-		error = EINVAL;
-		goto error;
-	}
-
 	MPASS(error == 0 && *parse_error == NULL);
 out:
 	free(copy, M_MAC_DO);