diff options
| author | elad <elad@NetBSD.org> | 2009-11-14 18:36:56 +0000 |
|---|---|---|
| committer | elad <elad@NetBSD.org> | 2009-11-14 18:36:56 +0000 |
| commit | 1570e68c40926acf8a0d770e78741cfada36eb9d (patch) | |
| tree | 9fddbcf75565569c97f09c16547719988b538efa /sys/secmodel | |
| parent | 3e92dd482c6e580f44829bb1b8ce176054649486 (diff) | |
- Move kauth_init() a little bit higher.
- Add spec_init() to authorize special device actions (and passthru too for
the time being). Move policy out of secmodel_suser.
Diffstat (limited to 'sys/secmodel')
| -rw-r--r-- | sys/secmodel/suser/secmodel_suser.c | 15 |
1 files changed, 2 insertions, 13 deletions
diff --git a/sys/secmodel/suser/secmodel_suser.c b/sys/secmodel/suser/secmodel_suser.c index 822485c72bc..3ee65b88815 100644 --- a/sys/secmodel/suser/secmodel_suser.c +++ b/sys/secmodel/suser/secmodel_suser.c @@ -1,4 +1,4 @@ -/* $NetBSD: secmodel_suser.c,v 1.30 2009/10/07 01:31:41 elad Exp $ */ +/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */ /*- * Copyright (c) 2006 Elad Efrat <elad@NetBSD.org> * All rights reserved. @@ -38,7 +38,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.30 2009/10/07 01:31:41 elad Exp $"); +__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $"); #include <sys/types.h> #include <sys/param.h> @@ -873,17 +873,6 @@ secmodel_suser_device_cb(kauth_cred_t cred, kauth_action_t action, break; } - case KAUTH_DEVICE_RAWIO_SPEC: - case KAUTH_DEVICE_RAWIO_PASSTHRU: - /* - * Decision is root-agnostic. - * - * Both requests can be issued on devices subject to their - * permission bits. - */ - result = KAUTH_RESULT_ALLOW; - break; - case KAUTH_DEVICE_GPIO_PINSET: /* * root can access gpio pins, secmodel_securlevel can veto |
