]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Add mpo_vnode_check_setmode MAC method to MAC/veriexec.
authorStephen J. Kiernan <stevek@FreeBSD.org>
Sat, 14 Jul 2018 17:21:16 +0000 (17:21 +0000)
committerStephen J. Kiernan <stevek@FreeBSD.org>
Sat, 14 Jul 2018 17:21:16 +0000 (17:21 +0000)
commitade97886650b5c08654262389162e815cc0f422d
tree6770262afa0a7328357b7a89f0b577e0583aabde
parent8c0873714c467e3aa2e16e596df1670e550f84c7
Add mpo_vnode_check_setmode MAC method to MAC/veriexec.
In the method, disallow changing SUID/SGID on verified files.

Obtained from: Juniper Networks, Inc.
sys/security/mac_veriexec/mac_veriexec.c