xnu-4570.51.1.tar.gz

[apple/xnu.git] / security / mac_priv.c

diff --git a/security/mac_priv.c b/security/mac_priv.c
index 7d72ce88d6789b713b8861a7a64a7103ed6db9e7..59f14de128fc22ba305f03cf4b3229ae4324f1e9 100644 (file)
--- a/security/mac_priv.c
+++ b/security/mac_priv.c
@@ -86,6 +86,9 @@ mac_priv_check(kauth_cred_t cred, int priv)
 {
        int error;
 
+       if (!mac_cred_check_enforce(cred))
+               return 0;
+
        MAC_CHECK(priv_check, cred, priv);
 
        return (error);
@@ -100,6 +103,9 @@ mac_priv_grant(kauth_cred_t cred, int priv)
 {
        int error;
 
+       if (!mac_cred_check_enforce(cred))
+               return 0;
+
        MAC_GRANT(priv_grant, cred, priv);
 
        return (error);