Remove mac_biba_high_single() check for interface renaming: we now

use the notion that a subject range of (low-high) connotes Biba
privilege rather than a single of high.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

1 files changed, 0 insertions, 12 deletions

diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c
index f1b1a18..e999ca5 100644
--- a/sys/security/mac_biba/mac_biba.c
+++ b/sys/security/mac_biba/mac_biba.c
@@ -258,13 +258,6 @@ mac_biba_equal_single(struct mac_biba *a, struct mac_biba *b)
 }
 
 static int
-mac_biba_high_single(struct mac_biba *mac_biba)
-{
-
-	return (mac_biba->mb_single.mbe_type == MAC_BIBA_TYPE_HIGH);
-}
-
-static int
 mac_biba_valid(struct mac_biba *mac_biba)
 {
 
@@ -1247,11 +1240,6 @@ mac_biba_check_ifnet_relabel(struct ucred *cred, struct ifnet *ifnet,
 	if ((new->mb_flags & MAC_BIBA_FLAGS_BOTH) != MAC_BIBA_FLAGS_BOTH)
 		return (EINVAL);
 
-	/*
-	 * XXX: Only Biba HIGH subjects may relabel interfaces. */
-	if (!mac_biba_high_single(subj))
-		return (EPERM);
-
 	return (suser_cred(cred, 0));
 }