From owner-cvs-src@FreeBSD.ORG  Sat Mar  4 20:47:20 2006
Return-Path: <owner-cvs-src@FreeBSD.ORG>
X-Original-To: cvs-src@FreeBSD.org
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2E9A116A420;
	Sat,  4 Mar 2006 20:47:20 +0000 (GMT)
	(envelope-from dwmalone@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D94A043D45;
	Sat,  4 Mar 2006 20:47:19 +0000 (GMT)
	(envelope-from dwmalone@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k24KlJBr085542;
	Sat, 4 Mar 2006 20:47:19 GMT
	(envelope-from dwmalone@repoman.freebsd.org)
Received: (from dwmalone@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k24KlJG3085541;
	Sat, 4 Mar 2006 20:47:19 GMT (envelope-from dwmalone)
Message-Id: <200603042047.k24KlJG3085541@repoman.freebsd.org>
From: David Malone <dwmalone@FreeBSD.org>
Date: Sat, 4 Mar 2006 20:47:19 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/security/mac_bsdextended mac_bsdextended.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Mar 2006 20:47:20 -0000

dwmalone    2006-03-04 20:47:19 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac_bsdextended mac_bsdextended.c 
  Log:
  Create a mac_bsdextended_check_vp function that takes a cred, a
  vnode and a mode and checks if a given access mode is permitted.
  This centralises the mac_bsdextended_enabled check and the GETATTR
  calls and makes the implementation of the mac policy methods simple.
  
  This should make it easier for us to match vnodes on more complex
  attributes than just uid and gid in the future, but for now there
  should be no functional change.
  
  Approved/Reviewed by:   rwatson, trhodes
  MFC after:      1 month
  
  Revision  Changes    Path
  1.28      +43 -280   src/sys/security/mac_bsdextended/mac_bsdextended.c