From 8f30a62d60032f11421cc23b2eca1112a579522c Mon Sep 17 00:00:00 2001 From: rwatson Date: Sat, 10 Feb 2007 08:59:39 +0000 Subject: In mac_biba_check_system_swapoff(), don't extract the object label since it isn't used in the access control decision. This became visible to Coverity with the change to a function call retrieving label values. Coverity CID: 1723 --- sys/security/mac_biba/mac_biba.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'sys/security') diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c index fc9fc3c..81d8697 100644 --- a/sys/security/mac_biba/mac_biba.c +++ b/sys/security/mac_biba/mac_biba.c @@ -2350,14 +2350,13 @@ static int mac_biba_check_system_swapoff(struct ucred *cred, struct vnode *vp, struct label *label) { - struct mac_biba *subj, *obj; + struct mac_biba *subj; int error; if (!mac_biba_enabled) return (0); subj = SLOT(cred->cr_label); - obj = SLOT(label); error = mac_biba_subject_privileged(subj); if (error) -- cgit v1.1