Date: Fri, 17 Oct 2008 08:58:34 +0000 (UTC) From: "Bjoern A. Zeeb" <bz@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r183970 - head/sys/security/mac_partition Message-ID: <200810170858.m9H8wYCQ083301@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: bz Date: Fri Oct 17 08:58:33 2008 New Revision: 183970 URL: http://svn.freebsd.org/changeset/base/183970 Log: Use the label from the socket credential rather than the solabel which was not set by the mac_partition policy. Spotted by: rwatson Reviewed by: rwatson MFC after: 3 days Modified: head/sys/security/mac_partition/mac_partition.c Modified: head/sys/security/mac_partition/mac_partition.c ============================================================================== --- head/sys/security/mac_partition/mac_partition.c Fri Oct 17 08:30:20 2008 (r183969) +++ head/sys/security/mac_partition/mac_partition.c Fri Oct 17 08:58:33 2008 (r183970) @@ -51,6 +51,7 @@ #include <sys/priv.h> #include <sys/proc.h> #include <sys/sbuf.h> +#include <sys/socketvar.h> #include <sys/systm.h> #include <sys/sysctl.h> @@ -248,7 +249,7 @@ partition_socket_check_visible(struct uc { int error; - error = label_on_label(cred->cr_label, solabel); + error = label_on_label(cred->cr_label, so->so_cred->cr_label); return (error ? ENOENT : 0); }
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200810170858.m9H8wYCQ083301>