xnu-6153.121.1.tar.gz

[apple/xnu.git] / security / mac_vfs_subr.c

diff --git a/security/mac_vfs_subr.c b/security/mac_vfs_subr.c
index 6f4c096c70fb83b37d260b33475b2932eb728a66..3fb5132d588b7b0b2f1c027756caaab01fa20411 100644 (file)
--- a/security/mac_vfs_subr.c
+++ b/security/mac_vfs_subr.c
@@ -46,12 +46,17 @@ vnode_label(struct mount *mp, struct vnode *dvp, struct vnode *vp,
     struct componentname *cnp, int flags, vfs_context_t ctx)
 {
        int error = 0;
-
+       bool exit_fast;
 
        /* fast path checks... */
 
        /* are we labeling vnodes? If not still notify of create */
-       if (mac_label_vnodes == 0) {
+#if CONFIG_MACF_LAZY_VNODE_LABELS
+       exit_fast = true;
+#else
+       exit_fast = (mac_label_vnodes == 0);
+#endif
+       if (exit_fast) {
                if (flags & VNODE_LABEL_CREATE) {
                        error = mac_vnode_notify_create(ctx,
                            mp, dvp, vp, cnp);