d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

In mac_biba_check_system_swapoff(), don't extract the object label since

Browse Source 
it isn't used in the access control decision.  This became visible to
Coverity with the change to a function call retrieving label values.

Coverity CID:	1723
This commit is contained in:
Robert Watson 2007-02-10 08:59:39 +00:00
parent 47fa55cf93
commit 99535caa41
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=166617
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/security/mac_biba/mac_biba.c
View File

@ -2350,14 +2350,13 @@ static int
mac_biba_check_system_swapoff(struct ucred *cred, struct vnode *vp,
struct label *label)
{
struct mac_biba *subj, *obj;
struct mac_biba *subj;
int error;
if (!mac_biba_enabled)
return (0);
subj = SLOT(cred->cr_label);
obj = SLOT(label);
error = mac_biba_subject_privileged(subj);
if (error)