Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

prevent removal of monitored files as early as ids mode. 

okay blymn@
This commit is contained in:
elad 2006-07-24 16:27:15 +00:00
parent c41010f900
commit 93a2eaef51
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
sys/kern/kern_verifiedexec.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: kern_verifiedexec.c,v 1.59 2006/07/23 22:06:11 ad Exp $ */ /* $NetBSD: kern_verifiedexec.c,v 1.60 2006/07/24 16:27:15 elad Exp $ */
/*- /*-
* Copyright 2005 Elad Efrat <elad@NetBSD.org> * Copyright 2005 Elad Efrat <elad@NetBSD.org>
@ -30,7 +30,7 @@
*/ */
#include <sys/cdefs.h> #include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: kern_verifiedexec.c,v 1.59 2006/07/23 22:06:11 ad Exp $"); __KERNEL_RCSID(0, "$NetBSD: kern_verifiedexec.c,v 1.60 2006/07/24 16:27:15 elad Exp $");
#include "opt_verified_exec.h" #include "opt_verified_exec.h"
@ -591,8 +591,8 @@ veriexec_removechk(struct lwp *l, struct vnode *vp, const char *pathbuf)
veriexec_report("Remove request.", pathbuf, l, veriexec_report("Remove request.", pathbuf, l,
REPORT_NOVERBOSE, REPORT_ALARM, REPORT_NOPANIC); REPORT_NOVERBOSE, REPORT_ALARM, REPORT_NOPANIC);
/* IPS mode: Deny removal of monitored files. */ /* IDS mode: Deny removal of monitored files. */
if (veriexec_strict >= 2) if (veriexec_strict >= 1)
return (EPERM); return (EPERM);
fileassoc_clear(vp, veriexec_hook); fileassoc_clear(vp, veriexec_hook);