PERFORCE change 20082 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=20082

Change 20082 by rwatson at rwatson_tislabs on 2002/10/24 14:00:15

	Require Biba privilege to relabel interfaces.

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#158 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#158 (text+ko) ====

@@ -1519,6 +1519,13 @@
 		return (error);
 
 	/*
+	 * Relabling network interfaces requires Biba privilege.
+	 */
+	error = mac_biba_privileged(subj);
+	if (error)
+		return (error);
+
+	/*
 	 * If the Biba label is to be changed, authorize as appropriate.
 	 */
 	if (new->mb_flags & MAC_BIBA_FLAGS_BOTH) {
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message