Update policy modules for changes in arguments associated with support
for label access on the interpreter, not just the shell script. No policies currently present in the system rely on the new labels.
This commit is contained in:
parent
715eb2f2f1
commit
f21f000f01
@ -2044,7 +2044,7 @@ mac_biba_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_biba_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
struct mac_biba *subj, *obj;
|
||||
|
||||
|
@ -394,7 +394,7 @@ mac_bsdextended_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_bsdextended_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
struct vattr vap;
|
||||
int error;
|
||||
|
@ -1862,7 +1862,7 @@ mac_mls_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_mls_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
struct mac_mls *subj, *obj;
|
||||
|
||||
|
@ -416,14 +416,16 @@ mac_none_create_cred(struct ucred *cred_parent, struct ucred *cred_child)
|
||||
|
||||
static void
|
||||
mac_none_execve_transition(struct ucred *old, struct ucred *new,
|
||||
struct vnode *vp, struct label *vnodelabel)
|
||||
struct vnode *vp, struct label *vnodelabel,
|
||||
struct label *interpvnodelabel, struct image_params *imgp)
|
||||
{
|
||||
|
||||
}
|
||||
|
||||
static int
|
||||
mac_none_execve_will_transition(struct ucred *old, struct vnode *vp,
|
||||
struct label *vnodelabel)
|
||||
struct label *vnodelabel, struct label *interpvnodelabel,
|
||||
struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
@ -687,7 +689,7 @@ mac_none_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_none_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
|
@ -416,14 +416,16 @@ mac_none_create_cred(struct ucred *cred_parent, struct ucred *cred_child)
|
||||
|
||||
static void
|
||||
mac_none_execve_transition(struct ucred *old, struct ucred *new,
|
||||
struct vnode *vp, struct label *vnodelabel)
|
||||
struct vnode *vp, struct label *vnodelabel,
|
||||
struct label *interpvnodelabel, struct image_params *imgp)
|
||||
{
|
||||
|
||||
}
|
||||
|
||||
static int
|
||||
mac_none_execve_will_transition(struct ucred *old, struct vnode *vp,
|
||||
struct label *vnodelabel)
|
||||
struct label *vnodelabel, struct label *interpvnodelabel,
|
||||
struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
@ -687,7 +689,7 @@ mac_none_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_none_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
|
@ -766,14 +766,16 @@ mac_test_create_cred(struct ucred *cred_parent, struct ucred *cred_child)
|
||||
|
||||
static void
|
||||
mac_test_execve_transition(struct ucred *old, struct ucred *new,
|
||||
struct vnode *vp, struct label *filelabel)
|
||||
struct vnode *vp, struct label *filelabel,
|
||||
struct label *interpvnodelabel, struct image_params *imgp)
|
||||
{
|
||||
|
||||
}
|
||||
|
||||
static int
|
||||
mac_test_execve_will_transition(struct ucred *old, struct vnode *vp,
|
||||
struct label *filelabel)
|
||||
struct label *filelabel, struct label *interpvnodelabel,
|
||||
struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
@ -1014,7 +1016,7 @@ mac_test_check_vnode_deleteacl(struct ucred *cred, struct vnode *vp,
|
||||
|
||||
static int
|
||||
mac_test_check_vnode_exec(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
struct label *label, struct image_params *imgp)
|
||||
{
|
||||
|
||||
return (0);
|
||||
|
Loading…
Reference in New Issue
Block a user