cvs commit: src/sys/security/mac_mls mac_mls.c

[Robert Watson]

rwatson     2003/07/31 13:00:06 PDT

  FreeBSD src repository

  Modified files:
    sys/security/mac_mls mac_mls.c 
  Log:
  Improve consistency with the Biba policy -- rename
  mac_mls_subject_equal_ok() to mac_mls_subject_privileged(),
  which more consistently reflects the fact that this is really
  about our notion of privilege in the MLS policy.
  
  Since we don't use suser() for privilege in MLS, remove
  the suser check from the ifnet relabel ioctl, and replace it
  with an MLS privilege check.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, Network Associates Laboratories
  
  Revision  Changes    Path
  1.51      +10 -23    src/sys/security/mac_mls/mac_mls.c