Add an annotation to the comment for sysv_ipc.c to indicate that the

MAC Framework doesn't require checks in ipcperm() because checks
relating to System V IPC will be performed in individual IPC
implementations.
This commit is contained in:
Robert Watson 2004-10-22 12:12:40 +00:00
parent 397b3428eb
commit 857a600580
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=136778

View File

@ -67,9 +67,13 @@ shmexit(struct vmspace *vm)
}
/*
* Check for ipc permission
* Check for IPC permission.
*
* Note: The MAC Framework does not require any modifications to the
* ipcperm() function, as access control checks are performed throughout the
* implementation of each primitive. Those entry point calls complement the
* ipcperm() discertionary checks.
*/
int
ipcperm(td, perm, mode)
struct thread *td;