diff options
| author | rwatson <rwatson@FreeBSD.org> | 2002-10-22 17:02:42 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2002-10-22 17:02:42 +0000 |
| commit | 3d192c6f03877f39e5207828a666f8b67bd286a1 (patch) | |
| tree | 7505cc973bd9e8db7d397aada1fdedded8053088 /sys/security/mac_biba | |
| parent | 3397b88e7e10d16f7b8815b66542cea56158d8b2 (diff) | |
| download | FreeBSD-src-3d192c6f03877f39e5207828a666f8b67bd286a1.zip FreeBSD-src-3d192c6f03877f39e5207828a666f8b67bd286a1.tar.gz | |
Don't enforce MAC Biba policy for socket visibility if Biba is not
explicitly enabled.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Diffstat (limited to 'sys/security/mac_biba')
| -rw-r--r-- | sys/security/mac_biba/mac_biba.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c index f10fd53..2ab8b18 100644 --- a/sys/security/mac_biba/mac_biba.c +++ b/sys/security/mac_biba/mac_biba.c @@ -1785,6 +1785,9 @@ mac_biba_check_socket_visible(struct ucred *cred, struct socket *socket, { struct mac_biba *subj, *obj; + if (!mac_biba_enabled) + return (0); + subj = SLOT(&cred->cr_label); obj = SLOT(socketlabel); |
