From 3d192c6f03877f39e5207828a666f8b67bd286a1 Mon Sep 17 00:00:00 2001 From: rwatson Date: Tue, 22 Oct 2002 17:02:42 +0000 Subject: Don't enforce MAC Biba policy for socket visibility if Biba is not explicitly enabled. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories --- sys/security/mac_biba/mac_biba.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sys/security/mac_biba') diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c index f10fd53..2ab8b18 100644 --- a/sys/security/mac_biba/mac_biba.c +++ b/sys/security/mac_biba/mac_biba.c @@ -1785,6 +1785,9 @@ mac_biba_check_socket_visible(struct ucred *cred, struct socket *socket, { struct mac_biba *subj, *obj; + if (!mac_biba_enabled) + return (0); + subj = SLOT(&cred->cr_label); obj = SLOT(socketlabel); -- cgit v1.1