diff options
| author | jhb <jhb@FreeBSD.org> | 2008-06-23 21:37:53 +0000 |
|---|---|---|
| committer | jhb <jhb@FreeBSD.org> | 2008-06-23 21:37:53 +0000 |
| commit | 437891381c13fcfea1097ae4d151f60dbcd8f601 (patch) | |
| tree | 99442461adc39a20433f25399980988944e1cf03 /sys/security/mac_test | |
| parent | 0203c01701d045d8cccc12f303fdd5dc4c2a6c1b (diff) | |
| download | FreeBSD-src-437891381c13fcfea1097ae4d151f60dbcd8f601.zip FreeBSD-src-437891381c13fcfea1097ae4d151f60dbcd8f601.tar.gz | |
Remove the posixsem_check_destroy() MAC check. It is semantically identical
to doing a MAC check for close(), but no other types of close() (including
close(2) and ksem_close(2)) have MAC checks.
Discussed with: rwatson
Diffstat (limited to 'sys/security/mac_test')
| -rw-r--r-- | sys/security/mac_test/mac_test.c | 14 |
1 files changed, 0 insertions, 14 deletions
diff --git a/sys/security/mac_test/mac_test.c b/sys/security/mac_test/mac_test.c index bacebd4..8a3d646 100644 --- a/sys/security/mac_test/mac_test.c +++ b/sys/security/mac_test/mac_test.c @@ -1010,19 +1010,6 @@ test_pipe_relabel(struct ucred *cred, struct pipepair *pp, COUNTER_INC(pipe_relabel); } -COUNTER_DECL(posixsem_check_destroy); -static int -test_posixsem_check_destroy(struct ucred *cred, struct ksem *ks, - struct label *kslabel) -{ - - LABEL_CHECK(cred->cr_label, MAGIC_CRED); - LABEL_CHECK(kslabel, MAGIC_POSIX_SEM); - COUNTER_INC(posixsem_check_destroy); - - return (0); -} - COUNTER_DECL(posixsem_check_getvalue); static int test_posixsem_check_getvalue(struct ucred *cred, struct ksem *ks, @@ -2886,7 +2873,6 @@ static struct mac_policy_ops test_ops = .mpo_pipe_internalize_label = test_pipe_internalize_label, .mpo_pipe_relabel = test_pipe_relabel, - .mpo_posixsem_check_destroy = test_posixsem_check_destroy, .mpo_posixsem_check_getvalue = test_posixsem_check_getvalue, .mpo_posixsem_check_open = test_posixsem_check_open, .mpo_posixsem_check_post = test_posixsem_check_post, |
