From owner-cvs-all  Mon Aug 12  9:43:10 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 30A9537B400; Mon, 12 Aug 2002 09:43:05 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id E50B543E70; Mon, 12 Aug 2002 09:43:04 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g7CGh4JU059212;
	Mon, 12 Aug 2002 09:43:04 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g7CGh4PB059211;
	Mon, 12 Aug 2002 09:43:04 -0700 (PDT)
Message-Id: <200208121643.g7CGh4PB059211@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Mon, 12 Aug 2002 09:43:04 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/gnu/ext2fs ext2_lookup.c ext2_vnops.c
         src/sys/nfsclient nfs_lock.c src/sys/ufs/ufs ufs_lookup.c
         ufs_vnops.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/08/12 09:43:04 PDT

  Modified files:
    sys/gnu/ext2fs       ext2_lookup.c ext2_vnops.c 
    sys/nfsclient        nfs_lock.c 
    sys/ufs/ufs          ufs_lookup.c ufs_vnops.c 
  Log:
  Pass IO_NOMACCHECK to vn_rdwr() in the following checks to prevent
  enforcement of MAC policy on the read or write operations:
  
  - In ext2fs, don't enforce MAC on loop-back reads and writes supporting
    directory read operations in lookup(), directory modifications in
    rename(), directory write operations in mkdir(), symlink write
    operations in symlink().
  
  - In the NFS client locking code, perform vn_rdwr() on the NFS locking
    socket without enforcing MAC, since the write is done on behalf of
    the kernel NFS implementation rather than the user process.
  
  - In UFS, don't enforce MAC on loop-back reads and writes supporting
    directory read operations in lookup(), and symlink write operations
    in symlink().
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.35      +5 -3      src/sys/gnu/ext2fs/ext2_lookup.c
  1.67      +8 -7      src/sys/gnu/ext2fs/ext2_vnops.c
  1.23      +1 -1      src/sys/nfsclient/nfs_lock.c
  1.64      +5 -3      src/sys/ufs/ufs/ufs_lookup.c
  1.203     +2 -2      src/sys/ufs/ufs/ufs_vnops.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message