summaryrefslogtreecommitdiff
path: root/sys/secmodel
diff options
context:
space:
mode:
authorelad <elad@NetBSD.org>2009-11-14 18:36:56 +0000
committerelad <elad@NetBSD.org>2009-11-14 18:36:56 +0000
commit1570e68c40926acf8a0d770e78741cfada36eb9d (patch)
tree9fddbcf75565569c97f09c16547719988b538efa /sys/secmodel
parent3e92dd482c6e580f44829bb1b8ce176054649486 (diff)
- Move kauth_init() a little bit higher.
- Add spec_init() to authorize special device actions (and passthru too for the time being). Move policy out of secmodel_suser.
Diffstat (limited to 'sys/secmodel')
-rw-r--r--sys/secmodel/suser/secmodel_suser.c15
1 files changed, 2 insertions, 13 deletions
diff --git a/sys/secmodel/suser/secmodel_suser.c b/sys/secmodel/suser/secmodel_suser.c
index 822485c72bc..3ee65b88815 100644
--- a/sys/secmodel/suser/secmodel_suser.c
+++ b/sys/secmodel/suser/secmodel_suser.c
@@ -1,4 +1,4 @@
-/* $NetBSD: secmodel_suser.c,v 1.30 2009/10/07 01:31:41 elad Exp $ */
+/* $NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $ */
/*-
* Copyright (c) 2006 Elad Efrat <elad@NetBSD.org>
* All rights reserved.
@@ -38,7 +38,7 @@
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.30 2009/10/07 01:31:41 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.31 2009/11/14 18:36:56 elad Exp $");
#include <sys/types.h>
#include <sys/param.h>
@@ -873,17 +873,6 @@ secmodel_suser_device_cb(kauth_cred_t cred, kauth_action_t action,
break;
}
- case KAUTH_DEVICE_RAWIO_SPEC:
- case KAUTH_DEVICE_RAWIO_PASSTHRU:
- /*
- * Decision is root-agnostic.
- *
- * Both requests can be issued on devices subject to their
- * permission bits.
- */
- result = KAUTH_RESULT_ALLOW;
- break;
-
case KAUTH_DEVICE_GPIO_PINSET:
/*
* root can access gpio pins, secmodel_securlevel can veto