Robert Watson b4ef8be228 When allocation of labels on files is implicitly disabled due to MAC ...

policy configuration, avoid leaking resources following failed calls
to get and set MAC labels by file descriptor.

Reported by:	Mateusz Guzik <mjguzik at gmail.com> + clang scan-build
MFC after:	3 days

2012-04-08 11:01:49 +00:00

..

mac_atalk.c

…

mac_audit.c

…

mac_cred.c

…

mac_framework.c

put sys/systm.h at its proper place or add it if missing

2011-12-12 10:05:13 +00:00

mac_framework.h

Correct several issues in the integration of POSIX shared memory objects

2011-09-02 17:40:39 +00:00

mac_inet6.c

…

mac_inet.c

…

mac_internal.h

…

mac_label.c

…

mac_net.c

- Improve BPF locking model.

2012-04-06 06:53:58 +00:00

mac_pipe.c

…

mac_policy.h

Correct several issues in the integration of POSIX shared memory objects

2011-09-02 17:40:39 +00:00

mac_posix_sem.c

Add the fo_chown and fo_chmod methods to struct fileops and use them

2011-08-16 20:07:47 +00:00

mac_posix_shm.c

Correct several issues in the integration of POSIX shared memory objects

2011-09-02 17:40:39 +00:00

mac_priv.c

Revert the approach for skipping lockstat_probe_func call when doing

2011-12-12 23:29:32 +00:00

mac_process.c

Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() are

2011-02-05 21:21:27 +00:00

mac_socket.c

…

mac_syscalls.c

When allocation of labels on files is implicitly disabled due to MAC

2012-04-08 11:01:49 +00:00

mac_system.c

…

mac_sysv_msg.c

…

mac_sysv_sem.c

…

mac_sysv_shm.c

…

mac_vfs.c

…