Integrate a devfs/MAC fix from the MAC tree: avoid a race condition during

devfs VOP symlink creation by introducing a new entry point to determine
the label of the devfs_dirent prior to allocation of a vnode for the
symlink.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

1 files changed, 2 insertions, 0 deletions

diff --git a/sys/security/mac/mac_framework.h b/sys/security/mac/mac_framework.h
index a646ad3..b0d0468 100644
--- a/sys/security/mac/mac_framework.h
+++ b/sys/security/mac/mac_framework.h
@@ -244,6 +244,8 @@ void	mac_create_devfs_device(dev_t dev, struct devfs_dirent *de);
 void	mac_create_devfs_directory(char *dirname, int dirnamelen,
 	    struct devfs_dirent *de);
 void	mac_create_devfs_vnode(struct devfs_dirent *de, struct vnode *vp);
+void	mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+	    struct devfs_dirent *de);
 void	mac_create_vnode(struct ucred *cred, struct vnode *parent,
 	    struct vnode *child);
 void	mac_create_mount(struct ucred *cred, struct mount *mp);