diff options
| author | csjp <csjp@FreeBSD.org> | 2006-04-06 23:33:11 +0000 |
|---|---|---|
| committer | csjp <csjp@FreeBSD.org> | 2006-04-06 23:33:11 +0000 |
| commit | be495bef582420958359473d795fa8a169f560f7 (patch) | |
| tree | 1238986aae318c40637c5589ccf1012b648990cc /sys/security/mac/mac_policy.h | |
| parent | eb74e00e0c0b698cccd240b53935b86ae6bb2191 (diff) | |
| download | FreeBSD-src-be495bef582420958359473d795fa8a169f560f7.zip FreeBSD-src-be495bef582420958359473d795fa8a169f560f7.tar.gz | |
Introduce a new MAC entry point for label initialization of the NFS daemon's
credential: mac_associate_nfsd_label()
This entry point can be utilized by various Mandatory Access Control policies
so they can properly initialize the label of files which get created
as a result of an NFS operation. This work will be useful for fixing kernel
panics associated with accessing un-initialized or invalid vnode labels.
The implementation of these entry points will come shortly.
Obtained from: TrustedBSD
Requested by: mdodd
MFC after: 3 weeks
Diffstat (limited to 'sys/security/mac/mac_policy.h')
| -rw-r--r-- | sys/security/mac/mac_policy.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/security/mac/mac_policy.h b/sys/security/mac/mac_policy.h index 8573805..fe0fa7c 100644 --- a/sys/security/mac/mac_policy.h +++ b/sys/security/mac/mac_policy.h @@ -599,6 +599,7 @@ struct mac_policy_ops { int (*mpo_check_vnode_write)(struct ucred *active_cred, struct ucred *file_cred, struct vnode *vp, struct label *label); + void (*mpo_associate_nfsd_label)(struct ucred *cred); }; /* |
