David Malone 42ae38e9ec Create a mac_bsdextended_check_vp function that takes a cred, a ... vnode and a mode and checks if a given access mode is permitted. This centralises the mac_bsdextended_enabled check and the GETATTR calls and makes the implementation of the mac policy methods simple. This should make it easier for us to match vnodes on more complex attributes than just uid and gid in the future, but for now there should be no functional change. Approved/Reviewed by: rwatson, trhodes MFC after: 1 month		2006-03-04 20:47:19 +00:00
..
audit	Count drops when the first of two pipe mallocs fails.	2006-03-04 17:09:17 +00:00
mac	Eliminate a deadlock when creating snapshots. Blocking vn_start_write() must	2006-03-02 22:13:28 +00:00
mac_biba	Introduce a new sysctl variable:	2005-12-31 05:06:59 +00:00
mac_bsdextended	Create a mac_bsdextended_check_vp function that takes a cred, a	2006-03-04 20:47:19 +00:00
mac_ifoff
mac_lomac	Normalize a significant number of kernel malloc type names:	2005-10-31 15:41:29 +00:00
mac_mls	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_none	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_partition	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_portacl	Normalize a significant number of kernel malloc type names:	2005-10-31 15:41:29 +00:00
mac_seeotheruids	Allow the root user to be aware of other credentials by virtue	2005-09-30 23:41:10 +00:00
mac_stub	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_test	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00