Make mac_lomac(4) able to interpret NFSv4 access bits.
Reviewed by: rwatson
This commit is contained in:
parent
fffa535e95
commit
3a597bfc7b
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=201438
@ -2470,7 +2470,7 @@ lomac_vnode_check_open(struct ucred *cred, struct vnode *vp,
|
||||
obj = SLOT(vplabel);
|
||||
|
||||
/* XXX privilege override for admin? */
|
||||
if (accmode & (VWRITE | VAPPEND | VADMIN)) {
|
||||
if (accmode & VMODIFY_PERMS) {
|
||||
if (!lomac_subject_dominate(subj, obj))
|
||||
return (EACCES);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user