From 9ecf925a7d952716f0fd6c5a64b072a3caee80af Mon Sep 17 00:00:00 2001
From: rwatson <rwatson@FreeBSD.org>
Date: Wed, 5 Mar 2003 23:50:15 +0000
Subject: Provide a mac_check_system_swapoff() entry point, which permits MAC
 modules to authorize disabling of swap against a particular vnode.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
---
 sys/vm/vm_swap.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'sys/vm')

diff --git a/sys/vm/vm_swap.c b/sys/vm/vm_swap.c
index f968838..057a85d 100644
--- a/sys/vm/vm_swap.c
+++ b/sys/vm/vm_swap.c
@@ -433,6 +433,14 @@ swapoff(td, uap)
 	error = EINVAL;
 	goto done;
 found:
+#ifdef MAC
+	(void) vn_lock(vp, LK_EXCLUSIVE | LK_RETRY, td);
+	error = mac_check_system_swapoff(td->td_ucred, vp);
+	(void) VOP_UNLOCK(vp, 0, td);
+	if (error != 0)
+		goto done;
+#endif
+	
 	nblks = sp->sw_nblks;
 
 	/*
-- 
cgit v1.1