MFC r201438:

Make mac_lomac(4) able to interpret NFSv4 access bits.

Reviewed by:	rwatson
This commit is contained in:
Edward Tomasz Napierala 2010-03-27 15:05:06 +00:00
parent ec85a28567
commit 285438bfc0

View file

@ -2470,7 +2470,7 @@ lomac_vnode_check_open(struct ucred *cred, struct vnode *vp,
obj = SLOT(vplabel);
/* XXX privilege override for admin? */
if (accmode & (VWRITE | VAPPEND | VADMIN)) {
if (accmode & VMODIFY_PERMS) {
if (!lomac_subject_dominate(subj, obj))
return (EACCES);
}