Date: Sat, 13 Jul 2002 15:49:48 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 14197 for review Message-ID: <200207132249.g6DMnm4i069731@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=14197 Change 14197 by rwatson@rwatson_paprika on 2002/07/13 15:49:41 Debugging output for mac_bsdextended that can be toggled using a sysctl. Affected files ... .. //depot/projects/trustedbsd/mac/sys/security/mac_bsdextended/mac_bsdextended.c#32 edit Differences ... ==== //depot/projects/trustedbsd/mac/sys/security/mac_bsdextended/mac_bsdextended.c#32 (text+ko) ==== @@ -92,6 +92,10 @@ SYSCTL_INT(_security_mac_bsdextended, OID_AUTO, rule_slots, CTLFLAG_RD, &rule_slots, 0, "Number of used rule slots\n"); +static int mac_bsdextended_debugging; +SYSCTL_INT(_security_mac_bsdextended, OID_AUTO, debugging, CTLFLAG_RW, + &mac_bsdextended_debugging, 0, "Enable debugging on failure"); + static int mac_bsdextended_rule_valid(struct mac_bsdextended_rule *rule) { @@ -254,8 +258,13 @@ /* * Is the access permitted? */ - if ((rule->mbr_mode & acc_mode) != acc_mode) + if ((rule->mbr_mode & acc_mode) != acc_mode) { + if (mac_bsdextended_debugging) + printf("mac_bsdextended: %d:%d request %d on %d:%d" + " fails\n", cred->cr_ruid, cred->cr_rgid, + acc_mode, object_uid, object_gid); return (EACCES); + } return (0); } To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207132249.g6DMnm4i069731>