Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Jun 2009 14:15:00 +0000 (UTC)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r193507 - head/sys/fs/nfs
Message-ID:  <200906051415.n55EF072028116@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: rwatson
Date: Fri Jun  5 14:15:00 2009
New Revision: 193507
URL: http://svn.freebsd.org/changeset/base/193507

Log:
  Don't check MAC in the NFS server ACL set path, right now we aren't
  enforcing MAC for NFS clients.

Modified:
  head/sys/fs/nfs/nfs_commonacl.c

Modified: head/sys/fs/nfs/nfs_commonacl.c
==============================================================================
--- head/sys/fs/nfs/nfs_commonacl.c	Fri Jun  5 14:07:00 2009	(r193506)
+++ head/sys/fs/nfs/nfs_commonacl.c	Fri Jun  5 14:15:00 2009	(r193507)
@@ -703,10 +703,6 @@ nfsrv_setacl(vnode_t vp, NFSACL_T *aclp,
 	if (aclp->acl_cnt > (ACL_MAX_ENTRIES - 6) / 2)
 		return (NFSERR_ATTRNOTSUPP);
 	error = VOP_ACLCHECK(vp, ACL_TYPE_NFS4, aclp, cred, p);
-#ifdef MAC
-	if (!error)
-		error = mac_check_vnode_setacl(cred, vp, ACL_TYPE_NFS4, aclp);
-#endif
 	if (!error)
 		error = VOP_SETACL(vp, ACL_TYPE_NFS4, aclp, cred, p);
 	return (error);



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200906051415.n55EF072028116>