freebsd-skq/sys/security
David Malone 42ae38e9ec Create a mac_bsdextended_check_vp function that takes a cred, a
vnode and a mode and checks if a given access mode is permitted.
This centralises the mac_bsdextended_enabled check and the GETATTR
calls and makes the implementation of the mac policy methods simple.

This should make it easier for us to match vnodes on more complex
attributes than just uid and gid in the future, but for now there
should be no functional change.

Approved/Reviewed by:	rwatson, trhodes
MFC after:	1 month
2006-03-04 20:47:19 +00:00
..
audit Count drops when the first of two pipe mallocs fails. 2006-03-04 17:09:17 +00:00
mac Eliminate a deadlock when creating snapshots. Blocking vn_start_write() must 2006-03-02 22:13:28 +00:00
mac_biba Introduce a new sysctl variable: 2005-12-31 05:06:59 +00:00
mac_bsdextended Create a mac_bsdextended_check_vp function that takes a cred, a 2006-03-04 20:47:19 +00:00
mac_ifoff Update my personal copyrights and NETA copyrights in the kernel 2004-02-22 00:33:12 +00:00
mac_lomac Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
mac_mls Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_none Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_partition Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_portacl Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
mac_seeotheruids Allow the root user to be aware of other credentials by virtue 2005-09-30 23:41:10 +00:00
mac_stub Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_test Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00