Make mac_lomac(4) able to interpret NFSv4 access bits.

Reviewed by:	rwatson
This commit is contained in:
Edward Tomasz Napierala 2010-01-03 17:19:14 +00:00
parent fffa535e95
commit 3a597bfc7b
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=201438

View File

@ -2470,7 +2470,7 @@ lomac_vnode_check_open(struct ucred *cred, struct vnode *vp,
obj = SLOT(vplabel);
/* XXX privilege override for admin? */
if (accmode & (VWRITE | VAPPEND | VADMIN)) {
if (accmode & VMODIFY_PERMS) {
if (!lomac_subject_dominate(subj, obj))
return (EACCES);
}