diff options
| author | rwatson <rwatson@FreeBSD.org> | 2007-02-10 08:59:39 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2007-02-10 08:59:39 +0000 |
| commit | 8f30a62d60032f11421cc23b2eca1112a579522c (patch) | |
| tree | 3b5248f13a667b606d4ca9ca6782d27d28ef9c8f /sys/security | |
| parent | 6b5f1d5d9e89766afd04bd860e686ea4c2642054 (diff) | |
| download | FreeBSD-src-8f30a62d60032f11421cc23b2eca1112a579522c.zip FreeBSD-src-8f30a62d60032f11421cc23b2eca1112a579522c.tar.gz | |
In mac_biba_check_system_swapoff(), don't extract the object label since
it isn't used in the access control decision. This became visible to
Coverity with the change to a function call retrieving label values.
Coverity CID: 1723
Diffstat (limited to 'sys/security')
| -rw-r--r-- | sys/security/mac_biba/mac_biba.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c index fc9fc3c..81d8697 100644 --- a/sys/security/mac_biba/mac_biba.c +++ b/sys/security/mac_biba/mac_biba.c @@ -2350,14 +2350,13 @@ static int mac_biba_check_system_swapoff(struct ucred *cred, struct vnode *vp, struct label *label) { - struct mac_biba *subj, *obj; + struct mac_biba *subj; int error; if (!mac_biba_enabled) return (0); subj = SLOT(cred->cr_label); - obj = SLOT(label); error = mac_biba_subject_privileged(subj); if (error) |
