diff options
| author | rwatson <rwatson@FreeBSD.org> | 2007-07-23 13:28:54 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2007-07-23 13:28:54 +0000 |
| commit | 4d894bfc82e354a4b3a56a12d5897b8f6f69d244 (patch) | |
| tree | c7e3ce9624cd5b5b054d610b61d32b3214841c92 /sys/security/mac_mls/mac_mls.c | |
| parent | e8276674f3dc77e497ee2600cd45f51e731c6dab (diff) | |
| download | FreeBSD-src-4d894bfc82e354a4b3a56a12d5897b8f6f69d244.zip FreeBSD-src-4d894bfc82e354a4b3a56a12d5897b8f6f69d244.tar.gz | |
When checking labels during a vnode link operation in MLS, use the file
vnode label for a check rather than the directory vnode label a second
time.
MFC after: 3 days
Submitted by: Zhouyi ZHOU <zhouzhouyi at FreeBSD dot org>
Reviewed by: csjp
Sponsored by: Google Summer of Code 2007
Approved by: re (bmah)
Diffstat (limited to 'sys/security/mac_mls/mac_mls.c')
| -rw-r--r-- | sys/security/mac_mls/mac_mls.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/security/mac_mls/mac_mls.c b/sys/security/mac_mls/mac_mls.c index b0f2a61..7660b65 100644 --- a/sys/security/mac_mls/mac_mls.c +++ b/sys/security/mac_mls/mac_mls.c @@ -2416,7 +2416,7 @@ mac_mls_check_vnode_link(struct ucred *cred, struct vnode *dvp, if (!mac_mls_dominate_effective(obj, subj)) return (EACCES); - obj = SLOT(dvplabel); + obj = SLOT(vplabel); if (!mac_mls_dominate_effective(obj, subj)) return (EACCES); |
