From 3a597bfc7b005f16e6ae026775eb01ccdb6b6d2b Mon Sep 17 00:00:00 2001 From: Edward Tomasz Napierala Date: Sun, 3 Jan 2010 17:19:14 +0000 Subject: [PATCH] Make mac_lomac(4) able to interpret NFSv4 access bits. Reviewed by: rwatson --- sys/security/mac_lomac/mac_lomac.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/security/mac_lomac/mac_lomac.c b/sys/security/mac_lomac/mac_lomac.c index 63a6a63a2f8..af9539ccd5e 100644 --- a/sys/security/mac_lomac/mac_lomac.c +++ b/sys/security/mac_lomac/mac_lomac.c @@ -2470,7 +2470,7 @@ lomac_vnode_check_open(struct ucred *cred, struct vnode *vp, obj = SLOT(vplabel); /* XXX privilege override for admin? */ - if (accmode & (VWRITE | VAPPEND | VADMIN)) { + if (accmode & VMODIFY_PERMS) { if (!lomac_subject_dominate(subj, obj)) return (EACCES); }