Return to mac_xfs.c CVS log

Up to [Development] / xfs-linux

Update xfs mac policy to use xfs_fetch_attr.

/*
 * Copyright 1992, Silicon Graphics, Inc. 
 * All Rights Reserved.
 *
 * This is UNPUBLISHED PROPRIETARY SOURCE CODE of Silicon Graphics, Inc.;
 * the contents of this file may not be disclosed to third parties, copied or 
 * duplicated in any form, in whole or in part, without the prior written 
 * permission of Silicon Graphics, Inc.
 *
 * RESTRICTED RIGHTS LEGEND:
 * Use, duplication or disclosure by the Government is subject to restrictions 
 * as set forth in subdivision (c)(1)(ii) of the Rights in Technical Data
 * and Computer Software clause at DFARS 252.227-7013, and/or in similar or 
 * successor clauses in the FAR, DOD or NASA FAR Supplement. Unpublished - 
 * rights reserved under the Copyright Laws of the United States.
 */
#ident	"$Revision: 1.2 $"

#include <sys/types.h>
#include <sys/param.h>
#include <sys/vnode.h>
#include <sys/errno.h>
#include <sys/debug.h>
#include <sys/cmn_err.h>
#include <sys/mac_label.h>
#include <sys/systm.h>
#include <sys/attributes.h>
#include <sys/uuid.h>
#include "xfs_types.h"
#include "xfs_inum.h"
#include "xfs_log.h"
#include "xfs_trans.h"
#include "xfs_sb.h"
#include "xfs_ag.h"
#include "xfs_mount.h"
#include "xfs_alloc_btree.h"
#include "xfs_bmap_btree.h"
#include "xfs_ialloc_btree.h"
#include "xfs_itable.h"
#include "xfs_btree.h"
#include "xfs_ialloc.h"
#include "xfs_alloc.h"
#include "xfs_bmap.h"
#include "xfs_attr_sf.h"
#include "xfs_dir_sf.h"
#include "xfs_dinode.h"
#include "xfs_inode_item.h"
#include "xfs_inode.h"
#include "xfs_da_btree.h"
#include "xfs_attr.h"

extern struct cred *sys_cred;
extern mac_label *mac_high_low_lp;

int
mac_xfs_iaccess( xfs_inode_t *ip, mode_t mode, struct cred *cr )
{
	struct mac_label mac;
	struct mac_label *mp = mac_high_low_lp;
	int error = 0;

	if (cr == NULL || sys_cred == NULL ) {
		cmn_err(CE_NOTE,
			"mac_xfs_iaccess: %s(%d) cr=0x%08x, sys=0x%08x",
				__FILE__, __LINE__, cr, sys_cred);
		return EACCES;
	}

	if (xfs_attr_fetch(ip, SGI_MAC_FILE, (char *)&mac,
	    			sizeof(struct mac_label)) == 0) {
		if ((mp = mac_add_label(&mac)) == NULL) {
			cmn_err(CE_NOTE, "mac_xfs_iaccess: %s(%d) add label",
                                __FILE__, __LINE__);
			return EACCES;
		}
	}

	if ((error = mac_access(mp, cr, mode))) {
		cmn_err(CE_NOTE, "mac_xfs_iaccess: %s(%d) mac_access = %d",
                                __FILE__, __LINE__, error);
	}
	return error;
}