int
ugidfw_vnode_check_deleteacl(struct ucred *cred, struct vnode *vp,
struct label *vplabel, acl_type_t type)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_vnode_check_revoke(struct ucred *cred, struct vnode *vp,
struct label *vplabel)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_vnode_check_chroot(struct ucred *cred, struct vnode *dvp,
struct label *dvplabel)
{
return (ugidfw_check_vp(cred, dvp, MBI_EXEC));
}
int
ugidfw_vnode_check_setutimes(struct ucred *cred, struct vnode *vp,
struct label *vplabel, struct timespec atime, struct timespec utime)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_vnode_check_stat(struct ucred *active_cred,
struct ucred *file_cred, struct vnode *vp, struct label *vplabel)
{
return (ugidfw_check_vp(active_cred, vp, MBI_STAT));
}
int
ugidfw_vnode_check_setmode(struct ucred *cred, struct vnode *vp,
struct label *vplabel, mode_t mode)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_vnode_check_setowner(struct ucred *cred, struct vnode *vp,
struct label *vplabel, uid_t uid, gid_t gid)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_vnode_check_setextattr(struct ucred *cred, struct vnode *vp,
struct label *vplabel, int attrnamespace, const char *name)
{
return (ugidfw_check_vp(cred, vp, MBI_WRITE));
}
int
ugidfw_vnode_check_setflags(struct ucred *cred, struct vnode *vp,
struct label *vplabel, u_long flags)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_check_create_vnode(struct ucred *cred, struct vnode *dvp,
struct label *dvplabel, struct componentname *cnp, struct vattr *vap)
{
return (ugidfw_check_vp(cred, dvp, MBI_WRITE));
}
int
ugidfw_system_check_swapon(struct ucred *cred, struct vnode *vp,
struct label *vplabel)
{
return (ugidfw_check_vp(cred, vp, MBI_WRITE));
}
int
ugidfw_vnode_check_readdir(struct ucred *cred, struct vnode *dvp,
struct label *dvplabel)
{
return (ugidfw_check_vp(cred, dvp, MBI_READ));
}
int
ugidfw_vnode_check_readdlink(struct ucred *cred, struct vnode *vp,
struct label *vplabel)
{
return (ugidfw_check_vp(cred, vp, MBI_READ));
}
int
ugidfw_vnode_check_lookup(struct ucred *cred, struct vnode *dvp,
struct label *dvplabel, struct componentname *cnp)
{
return (ugidfw_check_vp(cred, dvp, MBI_EXEC));
}
int
ugidfw_vnode_check_listextattr(struct ucred *cred, struct vnode *vp,
struct label *vplabel, int attrnamespace)
{
return (ugidfw_check_vp(cred, vp, MBI_READ));
}
int
ugidfw_vnode_check_getacl(struct ucred *cred, struct vnode *vp,
struct label *vplabel, acl_type_t type)
{
return (ugidfw_check_vp(cred, vp, MBI_STAT));
}
int
ugidfw_vnode_check_access(struct ucred *cred, struct vnode *vp,
struct label *vplabel, accmode_t accmode)
{
return (ugidfw_check_vp(cred, vp, ugidfw_accmode2mbi(accmode)));
}
int
ugidfw_check_setacl_vnode(struct ucred *cred, struct vnode *vp,
struct label *vplabel, acl_type_t type, struct acl *acl)
{
return (ugidfw_check_vp(cred, vp, MBI_ADMIN));
}
int
ugidfw_vnode_check_exec(struct ucred *cred, struct vnode *vp,
struct label *vplabel, struct image_params *imgp,
struct label *execlabel)
{
return (ugidfw_check_vp(cred, vp, MBI_READ|MBI_EXEC));
}
int
ugidfw_system_check_auditctl(struct ucred *cred, struct vnode *vp,
struct label *vplabel)
{
if (vp != NULL)
return (ugidfw_check_vp(cred, vp, MBI_WRITE));
else
return (0);
}
