Robert Watson 47460a23a0 o Introduce new VOP_ACCESS() flag VADMIN, allowing file systems to perform ... "administrative" authorization checks. In most cases, the VADMIN test checks to make sure the credential effective uid is the same as the file owner. o Modify vaccess() to set VADMIN as an available right if the uid is appropriate. o Modify references to uid-based access control operations such that they now always invoke VOP_ACCESS() instead of using hard-coded policy checks. o This allows alternative UFS policies to be implemented by replacing only ufs_access() (such as mandatory system policies). o VOP_ACCESS() requires the caller to hold an exclusive vnode lock on the vnode: I believe that new invocations of VOP_ACCESS() are always called with the lock held. o Some direct checks of the uid remain, largely associated with the QUOTA and SUIDDIR code. Reviewed by: eivind Obtained from: TrustedBSD Project		2000-10-19 07:53:59 +00:00
..
ffs	Initial commit of IFS - a inode-namespaced FFS. Here is a short	2000-10-14 03:02:30 +00:00
ifs	Initial commit of IFS - a inode-namespaced FFS. Here is a short	2000-10-14 03:02:30 +00:00
mfs	Add VOP_*VOBJECT vops, because MFS requires explicit vop specification.	2000-09-12 16:21:16 +00:00
ufs	o Introduce new VOP_ACCESS() flag VADMIN, allowing file systems to perform	2000-10-19 07:53:59 +00:00