mirror of
https://github.com/freebsd/freebsd-src
synced 2024-09-20 08:44:33 +00:00
In mac_biba_check_system_swapoff(), don't extract the object label since
it isn't used in the access control decision. This became visible to Coverity with the change to a function call retrieving label values. Coverity CID: 1723
This commit is contained in:
parent
47fa55cf93
commit
99535caa41
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=166617
|
@ -2350,14 +2350,13 @@ static int
|
|||
mac_biba_check_system_swapoff(struct ucred *cred, struct vnode *vp,
|
||||
struct label *label)
|
||||
{
|
||||
struct mac_biba *subj, *obj;
|
||||
struct mac_biba *subj;
|
||||
int error;
|
||||
|
||||
if (!mac_biba_enabled)
|
||||
return (0);
|
||||
|
||||
subj = SLOT(cred->cr_label);
|
||||
obj = SLOT(label);
|
||||
|
||||
error = mac_biba_subject_privileged(subj);
|
||||
if (error)
|
||||
|
|
Loading…
Reference in a new issue