diff options
| author | rwatson <rwatson@FreeBSD.org> | 2002-09-21 19:01:44 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2002-09-21 19:01:44 +0000 |
| commit | efd3f8f91670d519c92e62bc363aa33778e71519 (patch) | |
| tree | 11a2b7e558bf220e5ca0f978366cb38bdacb2760 /sys/security | |
| parent | 138978c49736754bf4a83e00a6bc7a1dd8e1a7e8 (diff) | |
| download | FreeBSD-src-efd3f8f91670d519c92e62bc363aa33778e71519.zip FreeBSD-src-efd3f8f91670d519c92e62bc363aa33778e71519.tar.gz | |
Remove mac_biba_high_single() check for interface renaming: we now
use the notion that a subject range of (low-high) connotes Biba
privilege rather than a single of high.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Diffstat (limited to 'sys/security')
| -rw-r--r-- | sys/security/mac_biba/mac_biba.c | 12 |
1 files changed, 0 insertions, 12 deletions
diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c index f1b1a18..e999ca5 100644 --- a/sys/security/mac_biba/mac_biba.c +++ b/sys/security/mac_biba/mac_biba.c @@ -258,13 +258,6 @@ mac_biba_equal_single(struct mac_biba *a, struct mac_biba *b) } static int -mac_biba_high_single(struct mac_biba *mac_biba) -{ - - return (mac_biba->mb_single.mbe_type == MAC_BIBA_TYPE_HIGH); -} - -static int mac_biba_valid(struct mac_biba *mac_biba) { @@ -1247,11 +1240,6 @@ mac_biba_check_ifnet_relabel(struct ucred *cred, struct ifnet *ifnet, if ((new->mb_flags & MAC_BIBA_FLAGS_BOTH) != MAC_BIBA_FLAGS_BOTH) return (EINVAL); - /* - * XXX: Only Biba HIGH subjects may relabel interfaces. */ - if (!mac_biba_high_single(subj)) - return (EPERM); - return (suser_cred(cred, 0)); } |
