Pass active_cred and file_cred into the MAC framework explicitly

for mac_check_vnode_{poll,read,stat,write}().  Pass in fp->f_cred
when calling these checks with a struct file available.  Otherwise,
pass NOCRED.  All currently MAC policies use active_cred, but
could now offer the cached credential semantic used for the base
system security model.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

1 files changed, 8 insertions, 8 deletions

diff --git a/sys/security/mac_test/mac_test.c b/sys/security/mac_test/mac_test.c
index 76f645d..e6b5da8 100644
--- a/sys/security/mac_test/mac_test.c
+++ b/sys/security/mac_test/mac_test.c
@@ -1007,16 +1007,16 @@ mac_test_check_vnode_open(struct ucred *cred, struct vnode *vp,
 }
 
 static int
-mac_test_check_vnode_poll(struct ucred *cred, struct vnode *vp,
-    struct label *label)
+mac_test_check_vnode_poll(struct ucred *active_cred, struct ucred *file_cred,
+    struct vnode *vp, struct label *label)
 {
 
 	return (0);
 }
 
 static int
-mac_test_check_vnode_read(struct ucred *cred, struct vnode *vp,
-    struct label *label)
+mac_test_check_vnode_read(struct ucred *active_cred, struct ucred *file_cred,
+    struct vnode *vp, struct label *label)
 {
 
 	return (0);
@@ -1121,16 +1121,16 @@ mac_test_check_vnode_setutimes(struct ucred *cred, struct vnode *vp,
 }
 
 static int
-mac_test_check_vnode_stat(struct ucred *cred, struct vnode *vp,
-    struct label *label)
+mac_test_check_vnode_stat(struct ucred *active_cred, struct ucred *file_cred,
+    struct vnode *vp, struct label *label)
 {
 
 	return (0);
 }
 
 static int
-mac_test_check_vnode_write(struct ucred *cred, struct vnode *vp,
-    struct label *label)
+mac_test_check_vnode_write(struct ucred *active_cred,
+    struct ucred *file_cred, struct vnode *vp, struct label *label)
 {
 
 	return (0);