From 4d365126c56c98cc583a57b1f74c056f6bdd0dda Mon Sep 17 00:00:00 2001 From: rwatson Date: Tue, 26 Jun 2007 14:14:01 +0000 Subject: Add a new MAC framework and policy entry point, mpo_check_proc_setaudit_addr to be used when controlling use of setaudit_addr(), rather than mpo_check_proc_setaudit(), which takes a different argument type. Reviewed by: csjp Approved by: re (kensmith) --- sys/security/mac/mac_audit.c | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'sys/security/mac/mac_audit.c') diff --git a/sys/security/mac/mac_audit.c b/sys/security/mac/mac_audit.c index c3aad11..69731c7 100644 --- a/sys/security/mac/mac_audit.c +++ b/sys/security/mac/mac_audit.c @@ -56,6 +56,16 @@ mac_check_proc_setaudit(struct ucred *cred, struct auditinfo *ai) } int +mac_check_proc_setaudit_addr(struct ucred *cred, struct auditinfo_addr *aia) +{ + int error; + + MAC_CHECK(check_proc_setaudit_addr, cred, aia); + + return (error); +} + +int mac_check_proc_setauid(struct ucred *cred, uid_t auid) { int error; -- cgit v1.1