xnu-2782.10.72.tar.gz

[apple/xnu.git] / security / mac_socket.c

diff --git a/security/mac_socket.c b/security/mac_socket.c
index bd35170eed51dc3e5841117374ac97f47f11549a..b9bc4b698f3ba4f0439753e3e941a6029e277ba7 100644 (file)
--- a/security/mac_socket.c
+++ b/security/mac_socket.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2007 Apple Inc. All rights reserved.
+ * Copyright (c) 2007-2012 Apple Inc. All rights reserved.
  *
  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
  * 
@@ -82,12 +82,6 @@
 #include <sys/sysctl.h>
 #include <sys/kpi_socket.h>
 
-#include <net/if.h>
-#include <net/if_var.h>
-
-#include <netinet/in.h>
-#include <netinet/ip_var.h>
-
 #include <security/mac_internal.h>
 
 #if CONFIG_MACF_SOCKET
@@ -478,6 +472,7 @@ mac_socket_check_accept(kauth_cred_t cred, struct socket *so)
        return (error);
 }
 
+#if CONFIG_MACF_SOCKET_SUBSET
 int
 mac_socket_check_accepted(kauth_cred_t cred, struct socket *so)
 {
@@ -496,6 +491,7 @@ mac_socket_check_accepted(kauth_cred_t cred, struct socket *so)
        }
        return (error);
 }
+#endif
 
 int
 mac_socket_check_bind(kauth_cred_t ucred, struct socket *so,
@@ -596,9 +592,9 @@ mac_socket_check_received(kauth_cred_t cred, struct socket *so, struct sockaddr
 
        if (!mac_socket_enforce)
                return 0;
-
+       
        MAC_CHECK(socket_check_received, cred,
-                 (socket_t)so, so->so_label, saddr);
+                 so, so->so_label, saddr);
        return (error);
 }