PERFORCE change 14781 for review

[Robert Watson]

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=14781

Change 14781 by rwatson at rwatson_paprika on 2002/07/23 09:21:50

	Implement mac_partition_execve_transition() as a wrapper to
	mac_create_subject() so that mac_partition works properly in
	the presence of a transitioning policy.

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/security/mac_partition/mac_partition.c#4 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/security/mac_partition/mac_partition.c#4 (text+ko) ====

@@ -139,6 +139,14 @@
 }
 
 static void
+mac_partition_execve_transition(struct ucred *old, struct ucred *new,
+    struct vnode *vp, struct label *vnodelabel)
+{
+
+	mac_partition_create_subject(old, new);
+}
+
+static void
 mac_partition_create_proc0(struct ucred *cred)
 {
 
@@ -259,6 +267,8 @@
 	    (macop_t)mac_partition_internalize },
 	{ MAC_CREATE_SUBJECT,
 	    (macop_t)mac_partition_create_subject },
+	{ MAC_EXECVE_TRANSITION,
+	    (macop_t)mac_partition_execve_transition },
 	{ MAC_CREATE_PROC0,
 	    (macop_t)mac_partition_create_proc0 },
 	{ MAC_CREATE_PROC1,
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message