K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2008-03-01T11:55:11.000000Z
K 7
svn:log
V 643
Merge mac_mls.c:1.99 from HEAD to RELENG_7:

  Properly return the error from mls_subject_privileged() in the ifnet
  relabel check for MLS rather than returning 0 directly.

  This problem didn't result in a vulnerability currently as the central
  implementation of ifnet relabeling also checks for UNIX privilege, and
  we currently don't guarantee containment for the root user in mac_mls,
  but we should be using the MLS definition of privilege as well as the
  UNIX definition in anticipation of supporting root containment at some
  point.

  Submitted by:   Zhouyi Zhou <zhouzhouyi at gmail dot com>
  Sponsored by:   Google SoC 2007

END