Add LOGIN_SETMAC, which will indicate to the user context management code

that it should also set the user's default MAC label, if available and
permitted.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

diff --git a/libutil/login_cap.h b/libutil/login_cap.h
index 0728e1396cbe829d15c4260909f5ef0f7d3dd5e1..f6c6431ecd30a92734b16d1f7f2af12564c7581f 100644 (file)
--- a/libutil/login_cap.h
+++ b/libutil/login_cap.h
@@ -47,7 +47,8 @@
 #define LOGIN_SETUMASK         0x0020          /* set umask, obviously */
 #define LOGIN_SETUSER          0x0040          /* set user (via setuid) */
 #define LOGIN_SETENV           0x0080          /* set user environment */
 #define LOGIN_SETUMASK         0x0020          /* set umask, obviously */
 #define LOGIN_SETUSER          0x0040          /* set user (via setuid) */
 #define LOGIN_SETENV           0x0080          /* set user environment */

-#define LOGIN_SETALL           0x00ff          /* set everything */
+#define LOGIN_SETMAC           0x0100          /* set user default MAC label */
+#define LOGIN_SETALL           0x01ff          /* set everything */

 
 #define BI_AUTH                "authorize"             /* accepted authentication */
 #define BI_REJECT      "reject"                /* rejected authentication */
 
 #define BI_AUTH                "authorize"             /* accepted authentication */
 #define BI_REJECT      "reject"                /* rejected authentication */