hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-14 22:32:30 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix mac_veriexec version mismatch

Browse Source 
mac_veriexec sets its version to 1, but the mac_veriexec_shaX modules which depend on it expect MAC_VERIEXEC_VERSION = 2.
Be consistent and use MAC_VERIEXEC_VERSION everywhere.
This unbreaks loading of mac_veriexec modules at boot time.

Authored by: 		Kornel Duleba <mindal@semihalf.com>
Obtained from: 		Semihalf
Sponsored by: 		Stormshield
Differential Revision: 	https://reviews.freebsd.org/D31268
This commit is contained in:
Wojciech Macek 2021-07-29 11:02:43 +02:00
parent 2d6d5f88d1
commit fe8ce390b8
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/dev/veriexec/verified_exec.c
View File

@ -266,4 +266,5 @@ veriexec_drvinit(void *unused __unused)
}
SYSINIT(veriexec, SI_SUB_PSEUDO, SI_ORDER_ANY, veriexec_drvinit, NULL);
MODULE_DEPEND(veriexec, mac_veriexec, 1, 1, 1);
MODULE_DEPEND(veriexec, mac_veriexec, MAC_VERIEXEC_VERSION,
MAC_VERIEXEC_VERSION, MAC_VERIEXEC_VERSION);

2
sys/security/mac_veriexec/mac_veriexec.c
View File

@ -737,7 +737,7 @@ static struct mac_policy_ops mac_veriexec_ops =
MAC_POLICY_SET(&mac_veriexec_ops, mac_veriexec, MAC_VERIEXEC_FULLNAME,
MPC_LOADTIME_FLAG_NOTLATE, &mac_veriexec_slot);
MODULE_VERSION(mac_veriexec, 1);
MODULE_VERSION(mac_veriexec, MAC_VERIEXEC_VERSION);
static struct vnode *
mac_veriexec_bottom_vnode(struct vnode *vp)