Add an annotation to the comment for sysv_ipc.c to indicate that the
MAC Framework doesn't require checks in ipcperm() because checks relating to System V IPC will be performed in individual IPC implementations.
This commit is contained in:
parent
00f1836c10
commit
fe8ddb95e0
@ -67,9 +67,13 @@ shmexit(struct vmspace *vm)
|
||||
}
|
||||
|
||||
/*
|
||||
* Check for ipc permission
|
||||
* Check for IPC permission.
|
||||
*
|
||||
* Note: The MAC Framework does not require any modifications to the
|
||||
* ipcperm() function, as access control checks are performed throughout the
|
||||
* implementation of each primitive. Those entry point calls complement the
|
||||
* ipcperm() discertionary checks.
|
||||
*/
|
||||
|
||||
int
|
||||
ipcperm(td, perm, mode)
|
||||
struct thread *td;
|
||||
|
Loading…
x
Reference in New Issue
Block a user