| 1 |
1275 |
phoenix |
/*
|
| 2 |
|
|
* Copyright (c) 2000-2002 Silicon Graphics, Inc. All Rights Reserved.
|
| 3 |
|
|
*
|
| 4 |
|
|
* This program is free software; you can redistribute it and/or modify it
|
| 5 |
|
|
* under the terms of version 2 of the GNU General Public License as
|
| 6 |
|
|
* published by the Free Software Foundation.
|
| 7 |
|
|
*
|
| 8 |
|
|
* This program is distributed in the hope that it would be useful, but
|
| 9 |
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
| 10 |
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
| 11 |
|
|
*
|
| 12 |
|
|
* Further, this software is distributed without any warranty that it is
|
| 13 |
|
|
* free of the rightful claim of any third person regarding infringement
|
| 14 |
|
|
* or the like. Any license provided herein, whether implied or
|
| 15 |
|
|
* otherwise, applies only to this software file. Patent licenses, if
|
| 16 |
|
|
* any, provided herein do not apply to combinations of this program with
|
| 17 |
|
|
* other software, or any other product whatsoever.
|
| 18 |
|
|
*
|
| 19 |
|
|
* You should have received a copy of the GNU General Public License along
|
| 20 |
|
|
* with this program; if not, write the Free Software Foundation, Inc., 59
|
| 21 |
|
|
* Temple Place - Suite 330, Boston MA 02111-1307, USA.
|
| 22 |
|
|
*
|
| 23 |
|
|
* Contact information: Silicon Graphics, Inc., 1600 Amphitheatre Pkwy,
|
| 24 |
|
|
* Mountain View, CA 94043, or:
|
| 25 |
|
|
*
|
| 26 |
|
|
* http://www.sgi.com
|
| 27 |
|
|
*
|
| 28 |
|
|
* For further information regarding this notice, see:
|
| 29 |
|
|
*
|
| 30 |
|
|
* http://oss.sgi.com/projects/GenInfo/SGIGPLNoticeExplan/
|
| 31 |
|
|
*/
|
| 32 |
|
|
|
| 33 |
|
|
#include "xfs.h"
|
| 34 |
|
|
|
| 35 |
|
|
static xfs_mac_label_t *mac_low_high_lp;
|
| 36 |
|
|
static xfs_mac_label_t *mac_high_low_lp;
|
| 37 |
|
|
static xfs_mac_label_t *mac_admin_high_lp;
|
| 38 |
|
|
static xfs_mac_label_t *mac_equal_equal_lp;
|
| 39 |
|
|
|
| 40 |
|
|
/*
|
| 41 |
|
|
* Test for the existence of a MAC label as efficiently as possible.
|
| 42 |
|
|
*/
|
| 43 |
|
|
int
|
| 44 |
|
|
xfs_mac_vhaslabel(
|
| 45 |
|
|
vnode_t *vp)
|
| 46 |
|
|
{
|
| 47 |
|
|
int error;
|
| 48 |
|
|
int len = sizeof(xfs_mac_label_t);
|
| 49 |
|
|
int flags = ATTR_KERNOVAL|ATTR_ROOT;
|
| 50 |
|
|
|
| 51 |
|
|
VOP_ATTR_GET(vp, SGI_MAC_FILE, NULL, &len, flags, sys_cred, error);
|
| 52 |
|
|
return (error == 0);
|
| 53 |
|
|
}
|
| 54 |
|
|
|
| 55 |
|
|
int
|
| 56 |
|
|
xfs_mac_iaccess(xfs_inode_t *ip, mode_t mode, struct cred *cr)
|
| 57 |
|
|
{
|
| 58 |
|
|
xfs_mac_label_t mac;
|
| 59 |
|
|
xfs_mac_label_t *mp = mac_high_low_lp;
|
| 60 |
|
|
|
| 61 |
|
|
if (cr == NULL || sys_cred == NULL ) {
|
| 62 |
|
|
return EACCES;
|
| 63 |
|
|
}
|
| 64 |
|
|
|
| 65 |
|
|
if (xfs_attr_fetch(ip, SGI_MAC_FILE, (char *)&mac, sizeof(mac)) == 0) {
|
| 66 |
|
|
if ((mp = mac_add_label(&mac)) == NULL) {
|
| 67 |
|
|
return mac_access(mac_high_low_lp, cr, mode);
|
| 68 |
|
|
}
|
| 69 |
|
|
}
|
| 70 |
|
|
|
| 71 |
|
|
return mac_access(mp, cr, mode);
|
| 72 |
|
|
}
|
