mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-17 10:26:15 +00:00
Code Issues Releases Activity

Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged()

Browse Source 
to evolve the notion of Biba privilege a bit.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
This commit is contained in:
Robert Watson 2002-10-28 19:17:39 +00:00
parent ee3bf1710a
commit 566d99847b
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=106090
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
sys/security/mac_biba/mac_biba.c
View File

@ -312,12 +312,12 @@ mac_biba_contains_equal(struct mac_biba *mac_biba)
}
static int
mac_biba_subject_equal_ok(struct mac_biba *mac_biba)
mac_biba_subject_privileged(struct mac_biba *mac_biba)
{
KASSERT((mac_biba->mb_flags & MAC_BIBA_FLAGS_BOTH) ==
MAC_BIBA_FLAGS_BOTH,
("mac_biba_subject_equal_ok: subject doesn't have both labels"));
("mac_biba_subject_privileged: subject doesn't have both labels"));
/* If the single is EQUAL, it's ok. */
if (mac_biba->mb_single.mbe_type == MAC_BIBA_TYPE_EQUAL)
@ -1476,7 +1476,7 @@ mac_biba_check_cred_relabel(struct ucred *cred, struct label *newlabel)
* their label.
*/
if (mac_biba_contains_equal(new)) {
error = mac_biba_subject_equal_ok(subj);
error = mac_biba_subject_privileged(subj);
if (error)
return (error);
}
@ -1673,7 +1673,7 @@ mac_biba_check_pipe_relabel(struct ucred *cred, struct pipe *pipe,
* subject must have appropriate privilege.
*/
if (mac_biba_contains_equal(new)) {
error = mac_biba_subject_equal_ok(subj);
error = mac_biba_subject_privileged(subj);
if (error)
return (error);
}
@ -1835,7 +1835,7 @@ mac_biba_check_socket_relabel(struct ucred *cred, struct socket *socket,
* the subject must have appropriate privilege.
*/
if (mac_biba_contains_equal(new)) {
error = mac_biba_subject_equal_ok(subj);
error = mac_biba_subject_privileged(subj);
if (error)
return (error);
}
@ -2221,7 +2221,7 @@ mac_biba_check_vnode_relabel(struct ucred *cred, struct vnode *vp,
* the subject must have appropriate privilege.
*/
if (mac_biba_contains_equal(new)) {
error = mac_biba_subject_equal_ok(subj);
error = mac_biba_subject_privileged(subj);
if (error)
return (error);
}