Update policy modules for changes in arguments associated with support
for label access on the interpreter, not just the shell script. No policies currently present in the system rely on the new labels.
This commit is contained in:
parent
670cb89bf4
commit
939b97cba6
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=106469
@ -2044,7 +2044,7 @@ mac_biba_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_biba_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
struct mac_biba *subj, *obj;
|
||||
|
||||
|
@ -394,7 +394,7 @@ mac_bsdextended_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_bsdextended_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
struct vattr vap;
|
||||
int error;
|
||||
|
@ -1862,7 +1862,7 @@ mac_mls_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_mls_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
struct mac_mls *subj, *obj;
|
||||
|
||||
|
@ -416,14 +416,16 @@ mac_none_create_cred(struct ucred *cred_parent, struct ucred *cred_child)
|
||||
|
||||
static void
|
||||
mac_none_execve_transition(struct ucred *old, struct ucred *new,
|
||||
struct vnode *vp, struct label *vnodelabel)
|
||||
struct vnode *vp, struct label *vnodelabel,
|
||||
struct label *interpvnodelabel, struct image_params *imgp)
|
||||
{
|
||||
|
||||
}
|
||||
|
||||
static int
|
||||
mac_none_execve_will_transition(struct ucred *old, struct vnode *vp,
|
||||
struct label *vnodelabel)
|
||||
struct label *vnodelabel, struct label *interpvnodelabel,
|
||||
struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
@ -687,7 +689,7 @@ mac_none_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_none_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
|
@ -416,14 +416,16 @@ mac_none_create_cred(struct ucred *cred_parent, struct ucred *cred_child)
|
||||
|
||||
static void
|
||||
mac_none_execve_transition(struct ucred *old, struct ucred *new,
|
||||
struct vnode *vp, struct label *vnodelabel)
|
||||
struct vnode *vp, struct label *vnodelabel,
|
||||
struct label *interpvnodelabel, struct image_params *imgp)
|
||||
{
|
||||
|
||||
}
|
||||
|
||||
static int
|
||||
mac_none_execve_will_transition(struct ucred *old, struct vnode *vp,
|
||||
struct label *vnodelabel)
|
||||
struct label *vnodelabel, struct label *interpvnodelabel,
|
||||
struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
@ -687,7 +689,7 @@ mac_none_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_none_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
|
@ -766,14 +766,16 @@ mac_test_create_cred(struct ucred *cred_parent, struct ucred *cred_child)
|
||||
|
||||
static void
|
||||
mac_test_execve_transition(struct ucred *old, struct ucred *new,
|
||||
struct vnode *vp, struct label *filelabel)
|
||||
struct vnode *vp, struct label *filelabel,
|
||||
struct label *interpvnodelabel, struct image_params *imgp)
|
||||
{
|
||||
|
||||
}
|
||||
|
||||
static int
|
||||
mac_test_execve_will_transition(struct ucred *old, struct vnode *vp,
|
||||
struct label *filelabel)
|
||||
struct label *filelabel, struct label *interpvnodelabel,
|
||||
struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
@ -1014,7 +1016,7 @@ mac_test_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_test_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
|
Loading…
Reference in New Issue
Block a user