PERFORCE change 16029 for review

[Robert Watson]

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=16029

Change 16029 by rwatson at rwatson_tislabs on 2002/08/15 08:55:28

	Assert process locks in the MAC access control check entry points
	targetting processes.

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/kern/kern_mac.c#243 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/kern/kern_mac.c#243 (text+ko) ====

@@ -2576,6 +2576,8 @@
 	if (!mac_enforce_process)
 		return (0);
 
+	PROC_LOCK_ASSERT(proc, MA_OWNED);
+
 	MAC_CHECK(check_proc_debug, cred, proc);
 
 	return (error);
@@ -2589,6 +2591,8 @@
 	if (!mac_enforce_process)
 		return (0);
 
+	PROC_LOCK_ASSERT(proc, MA_OWNED);
+
 	MAC_CHECK(check_proc_sched, cred, proc);
 
 	return (error);
@@ -2602,6 +2606,8 @@
 	if (!mac_enforce_process)
 		return (0);
 
+	PROC_LOCK_ASSERT(proc, MA_OWNED);
+
 	MAC_CHECK(check_proc_signal, cred, proc, signum);
 
 	return (error);
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message