Re: Vnode scope implementation

[yamt%mwd.biglobe.ne.jp@localhost (YAMAMOTO Takashi)]

hi,

> int
> ufs_access(void *v)
> {
>          struct vop_access_args /* {
>                  struct vnode    *a_vp;
>                  int             a_mode;
>                  kauth_cred_t    a_cred;
>          } */ *ap = v;
>          struct vnode    *vp;
>          struct inode    *ip;
>          mode_t          mode;
>          int             error;
> 
>          vp = ap->a_vp;
>          ip = VTOI(vp);
>          mode = ap->a_mode;
> 
>          error = ufs_check_possible(vp, ip, mode);
>          if (error)
>                  return error;
> 
>          error = ufs_check_permitted(vp, ip, mode, ap->a_cred);
> 
>          error = kauth_authorize_vnode(ap->a_cred,
>              kauth_mode_to_action(mode), vp, NULL, error);
> 
>          return error;
> }

- where filesystem-dependent native ACLs would be implemented?
  in ufs_check_permitted?

- for what kauth_authorize_vnode takes "error" returned from
  ufs_check_permitted?

YAMAMOTO Takashi