diff options
Diffstat (limited to 'sys/security/mac/mac_vfs.c')
| -rw-r--r-- | sys/security/mac/mac_vfs.c | 122 |
1 files changed, 62 insertions, 60 deletions
diff --git a/sys/security/mac/mac_vfs.c b/sys/security/mac/mac_vfs.c index 0cb0f15..dcd29aa 100644 --- a/sys/security/mac/mac_vfs.c +++ b/sys/security/mac/mac_vfs.c @@ -92,7 +92,7 @@ mac_devfs_label_alloc(void) struct label *label; label = mac_labelzone_alloc(M_WAITOK); - MAC_PERFORM(devfs_init_label, label); + MAC_POLICY_PERFORM(devfs_init_label, label); return (label); } @@ -112,7 +112,7 @@ mac_mount_label_alloc(void) struct label *label; label = mac_labelzone_alloc(M_WAITOK); - MAC_PERFORM(mount_init_label, label); + MAC_POLICY_PERFORM(mount_init_label, label); return (label); } @@ -132,7 +132,7 @@ mac_vnode_label_alloc(void) struct label *label; label = mac_labelzone_alloc(M_WAITOK); - MAC_PERFORM(vnode_init_label, label); + MAC_POLICY_PERFORM(vnode_init_label, label); return (label); } @@ -150,7 +150,7 @@ static void mac_devfs_label_free(struct label *label) { - MAC_PERFORM_NOSLEEP(devfs_destroy_label, label); + MAC_POLICY_PERFORM_NOSLEEP(devfs_destroy_label, label); mac_labelzone_free(label); } @@ -168,7 +168,7 @@ static void mac_mount_label_free(struct label *label) { - MAC_PERFORM_NOSLEEP(mount_destroy_label, label); + MAC_POLICY_PERFORM_NOSLEEP(mount_destroy_label, label); mac_labelzone_free(label); } @@ -186,7 +186,7 @@ void mac_vnode_label_free(struct label *label) { - MAC_PERFORM_NOSLEEP(vnode_destroy_label, label); + MAC_POLICY_PERFORM_NOSLEEP(vnode_destroy_label, label); mac_labelzone_free(label); } @@ -204,7 +204,7 @@ void mac_vnode_copy_label(struct label *src, struct label *dest) { - MAC_PERFORM_NOSLEEP(vnode_copy_label, src, dest); + MAC_POLICY_PERFORM_NOSLEEP(vnode_copy_label, src, dest); } int @@ -213,7 +213,7 @@ mac_vnode_externalize_label(struct label *label, char *elements, { int error; - MAC_EXTERNALIZE(vnode, label, elements, outbuf, outbuflen); + MAC_POLICY_EXTERNALIZE(vnode, label, elements, outbuf, outbuflen); return (error); } @@ -223,7 +223,7 @@ mac_vnode_internalize_label(struct label *label, char *string) { int error; - MAC_INTERNALIZE(vnode, label, string); + MAC_POLICY_INTERNALIZE(vnode, label, string); return (error); } @@ -232,7 +232,7 @@ void mac_devfs_update(struct mount *mp, struct devfs_dirent *de, struct vnode *vp) { - MAC_PERFORM_NOSLEEP(devfs_update, mp, de, de->de_label, vp, + MAC_POLICY_PERFORM_NOSLEEP(devfs_update, mp, de, de->de_label, vp, vp->v_label); } @@ -241,8 +241,8 @@ mac_devfs_vnode_associate(struct mount *mp, struct devfs_dirent *de, struct vnode *vp) { - MAC_PERFORM_NOSLEEP(devfs_vnode_associate, mp, mp->mnt_label, de, - de->de_label, vp, vp->v_label); + MAC_POLICY_PERFORM_NOSLEEP(devfs_vnode_associate, mp, mp->mnt_label, + de, de->de_label, vp, vp->v_label); } int @@ -252,7 +252,7 @@ mac_vnode_associate_extattr(struct mount *mp, struct vnode *vp) ASSERT_VOP_LOCKED(vp, "mac_vnode_associate_extattr"); - MAC_CHECK(vnode_associate_extattr, mp, mp->mnt_label, vp, + MAC_POLICY_CHECK(vnode_associate_extattr, mp, mp->mnt_label, vp, vp->v_label); return (error); @@ -262,8 +262,8 @@ void mac_vnode_associate_singlelabel(struct mount *mp, struct vnode *vp) { - MAC_PERFORM_NOSLEEP(vnode_associate_singlelabel, mp, mp->mnt_label, - vp, vp->v_label); + MAC_POLICY_PERFORM_NOSLEEP(vnode_associate_singlelabel, mp, + mp->mnt_label, vp, vp->v_label); } /* @@ -294,7 +294,7 @@ mac_vnode_create_extattr(struct ucred *cred, struct mount *mp, } else if (error) return (error); - MAC_CHECK(vnode_create_extattr, cred, mp, mp->mnt_label, dvp, + MAC_POLICY_CHECK(vnode_create_extattr, cred, mp, mp->mnt_label, dvp, dvp->v_label, vp, vp->v_label, cnp); if (error) { @@ -327,7 +327,8 @@ mac_vnode_setlabel_extattr(struct ucred *cred, struct vnode *vp, } else if (error) return (error); - MAC_CHECK(vnode_setlabel_extattr, cred, vp, vp->v_label, intlabel); + MAC_POLICY_CHECK(vnode_setlabel_extattr, cred, vp, vp->v_label, + intlabel); if (error) { VOP_CLOSEEXTATTR(vp, 0, NOCRED, curthread); @@ -348,8 +349,8 @@ mac_vnode_execve_transition(struct ucred *old, struct ucred *new, ASSERT_VOP_LOCKED(vp, "mac_vnode_execve_transition"); - MAC_PERFORM(vnode_execve_transition, old, new, vp, vp->v_label, - interpvplabel, imgp, imgp->execlabel); + MAC_POLICY_PERFORM(vnode_execve_transition, old, new, vp, + vp->v_label, interpvplabel, imgp, imgp->execlabel); } int @@ -362,7 +363,7 @@ mac_vnode_execve_will_transition(struct ucred *old, struct vnode *vp, result = 0; /* No sleeping since the process lock will be held by the caller. */ - MAC_BOOLEAN_NOSLEEP(vnode_execve_will_transition, ||, old, vp, + MAC_POLICY_BOOLEAN_NOSLEEP(vnode_execve_will_transition, ||, old, vp, vp->v_label, interpvplabel, imgp, imgp->execlabel); return (result); @@ -378,7 +379,7 @@ mac_vnode_check_access(struct ucred *cred, struct vnode *vp, accmode_t accmode) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_access"); - MAC_CHECK(vnode_check_access, cred, vp, vp->v_label, accmode); + MAC_POLICY_CHECK(vnode_check_access, cred, vp, vp->v_label, accmode); MAC_CHECK_PROBE3(vnode_check_access, error, cred, vp, accmode); return (error); @@ -394,7 +395,7 @@ mac_vnode_check_chdir(struct ucred *cred, struct vnode *dvp) ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_chdir"); - MAC_CHECK(vnode_check_chdir, cred, dvp, dvp->v_label); + MAC_POLICY_CHECK(vnode_check_chdir, cred, dvp, dvp->v_label); MAC_CHECK_PROBE2(vnode_check_chdir, error, cred, dvp); return (error); @@ -410,7 +411,7 @@ mac_vnode_check_chroot(struct ucred *cred, struct vnode *dvp) ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_chroot"); - MAC_CHECK(vnode_check_chroot, cred, dvp, dvp->v_label); + MAC_POLICY_CHECK(vnode_check_chroot, cred, dvp, dvp->v_label); MAC_CHECK_PROBE2(vnode_check_chroot, error, cred, dvp); return (error); @@ -427,7 +428,8 @@ mac_vnode_check_create(struct ucred *cred, struct vnode *dvp, ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_create"); - MAC_CHECK(vnode_check_create, cred, dvp, dvp->v_label, cnp, vap); + MAC_POLICY_CHECK(vnode_check_create, cred, dvp, dvp->v_label, cnp, + vap); MAC_CHECK_PROBE4(vnode_check_create, error, cred, dvp, cnp, vap); return (error); @@ -444,7 +446,7 @@ mac_vnode_check_deleteacl(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_deleteacl"); - MAC_CHECK(vnode_check_deleteacl, cred, vp, vp->v_label, type); + MAC_POLICY_CHECK(vnode_check_deleteacl, cred, vp, vp->v_label, type); MAC_CHECK_PROBE3(vnode_check_deleteacl, error, cred, vp, type); return (error); @@ -461,7 +463,7 @@ mac_vnode_check_deleteextattr(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_deleteextattr"); - MAC_CHECK(vnode_check_deleteextattr, cred, vp, vp->v_label, + MAC_POLICY_CHECK(vnode_check_deleteextattr, cred, vp, vp->v_label, attrnamespace, name); MAC_CHECK_PROBE4(vnode_check_deleteextattr, error, cred, vp, attrnamespace, name); @@ -480,7 +482,7 @@ mac_vnode_check_exec(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_exec"); - MAC_CHECK(vnode_check_exec, cred, vp, vp->v_label, imgp, + MAC_POLICY_CHECK(vnode_check_exec, cred, vp, vp->v_label, imgp, imgp->execlabel); MAC_CHECK_PROBE3(vnode_check_exec, error, cred, vp, imgp); @@ -497,7 +499,7 @@ mac_vnode_check_getacl(struct ucred *cred, struct vnode *vp, acl_type_t type) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_getacl"); - MAC_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type); + MAC_POLICY_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type); MAC_CHECK_PROBE3(vnode_check_getacl, error, cred, vp, type); return (error); @@ -514,7 +516,7 @@ mac_vnode_check_getextattr(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_getextattr"); - MAC_CHECK(vnode_check_getextattr, cred, vp, vp->v_label, + MAC_POLICY_CHECK(vnode_check_getextattr, cred, vp, vp->v_label, attrnamespace, name); MAC_CHECK_PROBE4(vnode_check_getextattr, error, cred, vp, attrnamespace, name); @@ -534,7 +536,7 @@ mac_vnode_check_link(struct ucred *cred, struct vnode *dvp, ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_link"); ASSERT_VOP_LOCKED(vp, "mac_vnode_check_link"); - MAC_CHECK(vnode_check_link, cred, dvp, dvp->v_label, vp, + MAC_POLICY_CHECK(vnode_check_link, cred, dvp, dvp->v_label, vp, vp->v_label, cnp); MAC_CHECK_PROBE4(vnode_check_link, error, cred, dvp, vp, cnp); @@ -552,7 +554,7 @@ mac_vnode_check_listextattr(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_listextattr"); - MAC_CHECK(vnode_check_listextattr, cred, vp, vp->v_label, + MAC_POLICY_CHECK(vnode_check_listextattr, cred, vp, vp->v_label, attrnamespace); MAC_CHECK_PROBE3(vnode_check_listextattr, error, cred, vp, attrnamespace); @@ -571,7 +573,7 @@ mac_vnode_check_lookup(struct ucred *cred, struct vnode *dvp, ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_lookup"); - MAC_CHECK(vnode_check_lookup, cred, dvp, dvp->v_label, cnp); + MAC_POLICY_CHECK(vnode_check_lookup, cred, dvp, dvp->v_label, cnp); MAC_CHECK_PROBE3(vnode_check_lookup, error, cred, dvp, cnp); return (error); @@ -588,7 +590,7 @@ mac_vnode_check_mmap(struct ucred *cred, struct vnode *vp, int prot, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_mmap"); - MAC_CHECK(vnode_check_mmap, cred, vp, vp->v_label, prot, flags); + MAC_POLICY_CHECK(vnode_check_mmap, cred, vp, vp->v_label, prot, flags); MAC_CHECK_PROBE4(vnode_check_mmap, error, cred, vp, prot, flags); return (error); @@ -602,7 +604,7 @@ mac_vnode_check_mmap_downgrade(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_mmap_downgrade"); - MAC_PERFORM(vnode_check_mmap_downgrade, cred, vp, vp->v_label, + MAC_POLICY_PERFORM(vnode_check_mmap_downgrade, cred, vp, vp->v_label, &result); *prot = result; @@ -618,7 +620,7 @@ mac_vnode_check_mprotect(struct ucred *cred, struct vnode *vp, int prot) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_mprotect"); - MAC_CHECK(vnode_check_mprotect, cred, vp, vp->v_label, prot); + MAC_POLICY_CHECK(vnode_check_mprotect, cred, vp, vp->v_label, prot); MAC_CHECK_PROBE3(vnode_check_mprotect, error, cred, vp, prot); return (error); @@ -634,7 +636,7 @@ mac_vnode_check_open(struct ucred *cred, struct vnode *vp, accmode_t accmode) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_open"); - MAC_CHECK(vnode_check_open, cred, vp, vp->v_label, accmode); + MAC_POLICY_CHECK(vnode_check_open, cred, vp, vp->v_label, accmode); return (error); } @@ -649,7 +651,7 @@ mac_vnode_check_poll(struct ucred *active_cred, struct ucred *file_cred, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_poll"); - MAC_CHECK(vnode_check_poll, active_cred, file_cred, vp, + MAC_POLICY_CHECK(vnode_check_poll, active_cred, file_cred, vp, vp->v_label); MAC_CHECK_PROBE3(vnode_check_poll, error, active_cred, file_cred, vp); @@ -668,7 +670,7 @@ mac_vnode_check_read(struct ucred *active_cred, struct ucred *file_cred, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_read"); - MAC_CHECK(vnode_check_read, active_cred, file_cred, vp, + MAC_POLICY_CHECK(vnode_check_read, active_cred, file_cred, vp, vp->v_label); MAC_CHECK_PROBE3(vnode_check_read, error, active_cred, file_cred, vp); @@ -686,7 +688,7 @@ mac_vnode_check_readdir(struct ucred *cred, struct vnode *dvp) ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_readdir"); - MAC_CHECK(vnode_check_readdir, cred, dvp, dvp->v_label); + MAC_POLICY_CHECK(vnode_check_readdir, cred, dvp, dvp->v_label); MAC_CHECK_PROBE2(vnode_check_readdir, error, cred, dvp); return (error); @@ -702,7 +704,7 @@ mac_vnode_check_readlink(struct ucred *cred, struct vnode *vp) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_readlink"); - MAC_CHECK(vnode_check_readlink, cred, vp, vp->v_label); + MAC_POLICY_CHECK(vnode_check_readlink, cred, vp, vp->v_label); MAC_CHECK_PROBE2(vnode_check_readlink, error, cred, vp); return (error); @@ -719,7 +721,7 @@ mac_vnode_check_relabel(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_relabel"); - MAC_CHECK(vnode_check_relabel, cred, vp, vp->v_label, newlabel); + MAC_POLICY_CHECK(vnode_check_relabel, cred, vp, vp->v_label, newlabel); MAC_CHECK_PROBE3(vnode_check_relabel, error, cred, vp, newlabel); return (error); @@ -737,7 +739,7 @@ mac_vnode_check_rename_from(struct ucred *cred, struct vnode *dvp, ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_rename_from"); ASSERT_VOP_LOCKED(vp, "mac_vnode_check_rename_from"); - MAC_CHECK(vnode_check_rename_from, cred, dvp, dvp->v_label, vp, + MAC_POLICY_CHECK(vnode_check_rename_from, cred, dvp, dvp->v_label, vp, vp->v_label, cnp); MAC_CHECK_PROBE4(vnode_check_rename_from, error, cred, dvp, vp, cnp); @@ -756,7 +758,7 @@ mac_vnode_check_rename_to(struct ucred *cred, struct vnode *dvp, ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_rename_to"); ASSERT_VOP_LOCKED(vp, "mac_vnode_check_rename_to"); - MAC_CHECK(vnode_check_rename_to, cred, dvp, dvp->v_label, vp, + MAC_POLICY_CHECK(vnode_check_rename_to, cred, dvp, dvp->v_label, vp, vp != NULL ? vp->v_label : NULL, samedir, cnp); MAC_CHECK_PROBE4(vnode_check_rename_to, error, cred, dvp, vp, cnp); return (error); @@ -772,7 +774,7 @@ mac_vnode_check_revoke(struct ucred *cred, struct vnode *vp) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_revoke"); - MAC_CHECK(vnode_check_revoke, cred, vp, vp->v_label); + MAC_POLICY_CHECK(vnode_check_revoke, cred, vp, vp->v_label); MAC_CHECK_PROBE2(vnode_check_revoke, error, cred, vp); return (error); @@ -789,7 +791,7 @@ mac_vnode_check_setacl(struct ucred *cred, struct vnode *vp, acl_type_t type, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_setacl"); - MAC_CHECK(vnode_check_setacl, cred, vp, vp->v_label, type, acl); + MAC_POLICY_CHECK(vnode_check_setacl, cred, vp, vp->v_label, type, acl); MAC_CHECK_PROBE4(vnode_check_setacl, error, cred, vp, type, acl); return (error); @@ -806,7 +808,7 @@ mac_vnode_check_setextattr(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_setextattr"); - MAC_CHECK(vnode_check_setextattr, cred, vp, vp->v_label, + MAC_POLICY_CHECK(vnode_check_setextattr, cred, vp, vp->v_label, attrnamespace, name); MAC_CHECK_PROBE4(vnode_check_setextattr, error, cred, vp, attrnamespace, name); @@ -824,7 +826,7 @@ mac_vnode_check_setflags(struct ucred *cred, struct vnode *vp, u_long flags) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_setflags"); - MAC_CHECK(vnode_check_setflags, cred, vp, vp->v_label, flags); + MAC_POLICY_CHECK(vnode_check_setflags, cred, vp, vp->v_label, flags); MAC_CHECK_PROBE3(vnode_check_setflags, error, cred, vp, flags); return (error); @@ -840,7 +842,7 @@ mac_vnode_check_setmode(struct ucred *cred, struct vnode *vp, mode_t mode) ASSERT_VOP_LOCKED(vp, "mac_vnode_check_setmode"); - MAC_CHECK(vnode_check_setmode, cred, vp, vp->v_label, mode); + MAC_POLICY_CHECK(vnode_check_setmode, cred, vp, vp->v_label, mode); MAC_CHECK_PROBE3(vnode_check_setmode, error, cred, vp, mode); return (error); @@ -857,7 +859,7 @@ mac_vnode_check_setowner(struct ucred *cred, struct vnode *vp, uid_t uid, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_setowner"); - MAC_CHECK(vnode_check_setowner, cred, vp, vp->v_label, uid, gid); + MAC_POLICY_CHECK(vnode_check_setowner, cred, vp, vp->v_label, uid, gid); MAC_CHECK_PROBE4(vnode_check_setowner, error, cred, vp, uid, gid); return (error); @@ -874,7 +876,7 @@ mac_vnode_check_setutimes(struct ucred *cred, struct vnode *vp, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_setutimes"); - MAC_CHECK(vnode_check_setutimes, cred, vp, vp->v_label, atime, + MAC_POLICY_CHECK(vnode_check_setutimes, cred, vp, vp->v_label, atime, mtime); MAC_CHECK_PROBE4(vnode_check_setutimes, error, cred, vp, &atime, &mtime); @@ -893,7 +895,7 @@ mac_vnode_check_stat(struct ucred *active_cred, struct ucred *file_cred, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_stat"); - MAC_CHECK(vnode_check_stat, active_cred, file_cred, vp, + MAC_POLICY_CHECK(vnode_check_stat, active_cred, file_cred, vp, vp->v_label); MAC_CHECK_PROBE3(vnode_check_stat, error, active_cred, file_cred, vp); @@ -913,7 +915,7 @@ mac_vnode_check_unlink(struct ucred *cred, struct vnode *dvp, ASSERT_VOP_LOCKED(dvp, "mac_vnode_check_unlink"); ASSERT_VOP_LOCKED(vp, "mac_vnode_check_unlink"); - MAC_CHECK(vnode_check_unlink, cred, dvp, dvp->v_label, vp, + MAC_POLICY_CHECK(vnode_check_unlink, cred, dvp, dvp->v_label, vp, vp->v_label, cnp); MAC_CHECK_PROBE4(vnode_check_unlink, error, cred, dvp, vp, cnp); @@ -931,7 +933,7 @@ mac_vnode_check_write(struct ucred *active_cred, struct ucred *file_cred, ASSERT_VOP_LOCKED(vp, "mac_vnode_check_write"); - MAC_CHECK(vnode_check_write, active_cred, file_cred, vp, + MAC_POLICY_CHECK(vnode_check_write, active_cred, file_cred, vp, vp->v_label); MAC_CHECK_PROBE3(vnode_check_write, error, active_cred, file_cred, vp); @@ -944,14 +946,14 @@ mac_vnode_relabel(struct ucred *cred, struct vnode *vp, struct label *newlabel) { - MAC_PERFORM(vnode_relabel, cred, vp, vp->v_label, newlabel); + MAC_POLICY_PERFORM(vnode_relabel, cred, vp, vp->v_label, newlabel); } void mac_mount_create(struct ucred *cred, struct mount *mp) { - MAC_PERFORM(mount_create, cred, mp, mp->mnt_label); + MAC_POLICY_PERFORM(mount_create, cred, mp, mp->mnt_label); } MAC_CHECK_PROBE_DEFINE2(mount_check_stat, "struct ucred *", @@ -962,7 +964,7 @@ mac_mount_check_stat(struct ucred *cred, struct mount *mount) { int error; - MAC_CHECK_NOSLEEP(mount_check_stat, cred, mount, mount->mnt_label); + MAC_POLICY_CHECK_NOSLEEP(mount_check_stat, cred, mount, mount->mnt_label); MAC_CHECK_PROBE2(mount_check_stat, error, cred, mount); return (error); @@ -973,7 +975,7 @@ mac_devfs_create_device(struct ucred *cred, struct mount *mp, struct cdev *dev, struct devfs_dirent *de) { - MAC_PERFORM_NOSLEEP(devfs_create_device, cred, mp, dev, de, + MAC_POLICY_PERFORM_NOSLEEP(devfs_create_device, cred, mp, dev, de, de->de_label); } @@ -982,7 +984,7 @@ mac_devfs_create_symlink(struct ucred *cred, struct mount *mp, struct devfs_dirent *dd, struct devfs_dirent *de) { - MAC_PERFORM_NOSLEEP(devfs_create_symlink, cred, mp, dd, + MAC_POLICY_PERFORM_NOSLEEP(devfs_create_symlink, cred, mp, dd, dd->de_label, de, de->de_label); } @@ -991,8 +993,8 @@ mac_devfs_create_directory(struct mount *mp, char *dirname, int dirnamelen, struct devfs_dirent *de) { - MAC_PERFORM_NOSLEEP(devfs_create_directory, mp, dirname, dirnamelen, - de, de->de_label); + MAC_POLICY_PERFORM_NOSLEEP(devfs_create_directory, mp, dirname, + dirnamelen, de, de->de_label); } /* |
