Add an annotation to the comment for sysv_ipc.c to indicate that the

MAC Framework doesn't require checks in ipcperm() because checks
relating to System V IPC will be performed in individual IPC
implementations.
This commit is contained in:
rwatson 2004-10-22 12:12:40 +00:00
parent 00f1836c10
commit fe8ddb95e0

View File

@ -67,9 +67,13 @@ shmexit(struct vmspace *vm)
}
/*
* Check for ipc permission
* Check for IPC permission.
*
* Note: The MAC Framework does not require any modifications to the
* ipcperm() function, as access control checks are performed throughout the
* implementation of each primitive. Those entry point calls complement the
* ipcperm() discertionary checks.
*/
int
ipcperm(td, perm, mode)
struct thread *td;