Robert Watson c08b677fb5 Pass IO_NOMACCHECK to vn_rdwr() in the following checks to prevent ... enforcement of MAC policy on the read or write operations: - In ext2fs, don't enforce MAC on loop-back reads and writes supporting directory read operations in lookup(), directory modifications in rename(), directory write operations in mkdir(), symlink write operations in symlink(). - In the NFS client locking code, perform vn_rdwr() on the NFS locking socket without enforcing MAC, since the write is done on behalf of the kernel NFS implementation rather than the user process. - In UFS, don't enforce MAC on loop-back reads and writes supporting directory read operations in lookup(), and symlink write operations in symlink(). Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs		2002-08-12 16:43:04 +00:00
..
ext2fs	Pass IO_NOMACCHECK to vn_rdwr() in the following checks to prevent	2002-08-12 16:43:04 +00:00