From 99535caa4120b367cf764a00dbc474205a46031d Mon Sep 17 00:00:00 2001
From: Robert Watson <rwatson@FreeBSD.org>
Date: Sat, 10 Feb 2007 08:59:39 +0000
Subject: [PATCH] In mac_biba_check_system_swapoff(), don't extract the object
 label since it isn't used in the access control decision.  This became
 visible to Coverity with the change to a function call retrieving label
 values.

Coverity CID:	1723
---
 sys/security/mac_biba/mac_biba.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/sys/security/mac_biba/mac_biba.c b/sys/security/mac_biba/mac_biba.c
index fc9fc3ca5c5..81d86979bb1 100644
--- a/sys/security/mac_biba/mac_biba.c
+++ b/sys/security/mac_biba/mac_biba.c
@@ -2350,14 +2350,13 @@ static int
 mac_biba_check_system_swapoff(struct ucred *cred, struct vnode *vp,
     struct label *label)
 {
-	struct mac_biba *subj, *obj;
+	struct mac_biba *subj;
 	int error;
 
 	if (!mac_biba_enabled)
 		return (0);
 
 	subj = SLOT(cred->cr_label);
-	obj = SLOT(label);
 
 	error = mac_biba_subject_privileged(subj);
 	if (error)