diff options
author | rwatson <rwatson@FreeBSD.org> | 2003-08-21 13:53:01 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2003-08-21 13:53:01 +0000 |
commit | 6f522a9e5248d735aaee5f9fd322c6c758801149 (patch) | |
tree | 516e8cf5fae27c0606b263da692534ee28f2e34b /sys/sys/mac.h | |
parent | 1c5a183b7da9ef0273663eacb58ec473ec905d00 (diff) | |
download | FreeBSD-src-6f522a9e5248d735aaee5f9fd322c6c758801149.zip FreeBSD-src-6f522a9e5248d735aaee5f9fd322c6c758801149.tar.gz |
Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():
explicit access control checks to delete and list extended attributes
on a vnode, rather than implicitly combining with the setextattr and
getextattr checks. This reflects EA API changes in the kernel made
recently, including the move to explicit VOP's for both of these
operations.
Obtained from: TrustedBSD PRoject
Sponsored by: DARPA, Network Associates Laboratories
Diffstat (limited to 'sys/sys/mac.h')
-rw-r--r-- | sys/sys/mac.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/sys/mac.h b/sys/sys/mac.h index 2412f8b..046c2fc 100644 --- a/sys/sys/mac.h +++ b/sys/sys/mac.h @@ -279,6 +279,8 @@ int mac_check_vnode_delete(struct ucred *cred, struct vnode *dvp, struct vnode *vp, struct componentname *cnp); int mac_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp, acl_type_t type); +int mac_check_vnode_deleteextattr(struct ucred *cred, struct vnode *vp, + int attrnamespace, const char *name); int mac_check_vnode_exec(struct ucred *cred, struct vnode *vp, struct image_params *imgp); int mac_check_vnode_getacl(struct ucred *cred, struct vnode *vp, @@ -287,6 +289,8 @@ int mac_check_vnode_getextattr(struct ucred *cred, struct vnode *vp, int attrnamespace, const char *name, struct uio *uio); int mac_check_vnode_link(struct ucred *cred, struct vnode *dvp, struct vnode *vp, struct componentname *cnp); +int mac_check_vnode_listextattr(struct ucred *cred, struct vnode *vp, + int attrnamespace); int mac_check_vnode_lookup(struct ucred *cred, struct vnode *dvp, struct componentname *cnp); int mac_check_vnode_mmap(struct ucred *cred, struct vnode *vp, |