upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-28 04:12:45 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Un-staticize mac_cred_mmapped_drop_perms() so that it may be used

Browse source 
by policy modules making use of downgrades in the MAC AST event.  This
is required by the mac_lomac port of LOMAC to the MAC Framework.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
This commit is contained in:
Robert Watson 2002-11-26 17:11:57 +00:00
parent 229cd60f68
commit 4d10c0ce5f
11 changed files with 11 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sys/kern/kern_mac.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_framework.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

1
sys/security/mac/mac_framework.h
View file

@ -335,6 +335,7 @@ int mac_setsockopt_label_set(struct ucred *cred, struct socket *so,
struct mac *extmac);
int mac_pipe_label_set(struct ucred *cred, struct pipe *pipe,
struct label *label);
void mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred);
/*
* Calls to help various file systems implement labeling functionality

2
sys/security/mac/mac_internal.h
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_net.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_pipe.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_process.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_syscalls.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_system.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

2
sys/security/mac/mac_vfs.c
View file

@ -1856,7 +1856,7 @@ mac_check_vnode_write(struct ucred *active_cred, struct ucred *file_cred,
* memory space, and revoke access (in the least surprising ways we
* know) when necessary. The process lock is not held here.
*/
static void
void
mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred)
{

1
sys/sys/mac.h
View file

@ -335,6 +335,7 @@ int mac_setsockopt_label_set(struct ucred *cred, struct socket *so,
struct mac *extmac);
int mac_pipe_label_set(struct ucred *cred, struct pipe *pipe,
struct label *label);
void mac_cred_mmapped_drop_perms(struct thread *td, struct ucred *cred);
/*
* Calls to help various file systems implement labeling functionality