upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-07-16 12:33:07 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

MAC/do: Comments: Rephrase one, fix a typo in another

Browse source 
No functional change.

MFC after:      3 days
Event:          AsiaBSDCon 2026
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 954aaf3958e2ea0e9b1811090ddbb9d8b13a3e5a)
This commit is contained in:
Olivier Certner 2026-03-21 21:39:04 +08:00
parent 25d0c5d445
commit 806d26e169
No known key found for this signature in database
GPG key ID: 8CA13040971E2627
1 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
sys/security/mac_do/mac_do.c
View file

@ -1153,13 +1153,14 @@ remove_rules(struct prison *const pr)
prison_lock(pr);
/*
* We go to the burden of extracting rules first instead of just letting
* osd_jail_del() calling dealloc_jail_osd() as we want to decrement
* their use count, and possibly free them, outside of the prison lock.
* We burden ourselves with extracting rules first instead of just
* letting osd_jail_del() call dealloc_jail_osd() as we want to
* decrement their use count, and possibly free them, outside of the
* prison lock.
*/
old_rules = osd_jail_get(pr, osd_jail_slot);
error = osd_jail_set(pr, osd_jail_slot, NULL);
/* osd_set() never fails nor allocate memory when 'value' is NULL. */
/* osd_set() never allocates memory when 'value' is NULL, nor fails. */
MPASS(error == 0);
/*
* This completely frees the OSD slot, but doesn't call the destructor