Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Oct 2002 14:00:52 -0700 (PDT)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 20082 for review
Message-ID:  <200210242100.g9OL0q4J029501@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=20082

Change 20082 by rwatson@rwatson_tislabs on 2002/10/24 14:00:15

	Require Biba privilege to relabel interfaces.

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#158 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#158 (text+ko) ====

@@ -1519,6 +1519,13 @@
 		return (error);
 
 	/*
+	 * Relabling network interfaces requires Biba privilege.
+	 */
+	error = mac_biba_privileged(subj);
+	if (error)
+		return (error);
+
+	/*
 	 * If the Biba label is to be changed, authorize as appropriate.
 	 */
 	if (new->mb_flags & MAC_BIBA_FLAGS_BOTH) {

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe p4-projects" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210242100.g9OL0q4J029501>