summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_mls/mac_mls.c
diff options
context:
space:
mode:
authortrasz <trasz@FreeBSD.org>2009-03-29 17:45:48 +0000
committertrasz <trasz@FreeBSD.org>2009-03-29 17:45:48 +0000
commit048abafaf9a435fb875b6c78ab52eb109811be96 (patch)
treed03c097b86131679060f8443a42eaab9f8d3456d /sys/security/mac_mls/mac_mls.c
parentaa09259c5bcc6d45a8e5cab2cb09d667d8d3c78e (diff)
downloadFreeBSD-src-048abafaf9a435fb875b6c78ab52eb109811be96.zip
FreeBSD-src-048abafaf9a435fb875b6c78ab52eb109811be96.tar.gz
Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat
better defined. Approved by: rwatson (mentor)
Diffstat (limited to 'sys/security/mac_mls/mac_mls.c')
-rw-r--r--sys/security/mac_mls/mac_mls.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/security/mac_mls/mac_mls.c b/sys/security/mac_mls/mac_mls.c
index 81030d7..6d13505 100644
--- a/sys/security/mac_mls/mac_mls.c
+++ b/sys/security/mac_mls/mac_mls.c
@@ -2515,11 +2515,11 @@ mls_vnode_check_open(struct ucred *cred, struct vnode *vp,
obj = SLOT(vplabel);
/* XXX privilege override for admin? */
- if (accmode & (VREAD | VEXEC | VSTAT)) {
+ if (accmode & (VREAD | VEXEC | VSTAT_PERMS)) {
if (!mls_dominate_effective(subj, obj))
return (EACCES);
}
- if (accmode & (VWRITE | VAPPEND | VADMIN)) {
+ if (accmode & VMODIFY_PERMS) {
if (!mls_dominate_effective(obj, subj))
return (EACCES);
}
OpenPOWER on IntegriCloud