Function lomac_subject_privileged

freebsd/security/mac_lomac/mac_lomac.c:317–341

}

static int
lomac_subject_privileged(struct mac_lomac *ml)
{

	KASSERT((ml->ml_flags & MAC_LOMAC_FLAGS_BOTH) ==
	    MAC_LOMAC_FLAGS_BOTH,
	    ("lomac_subject_privileged: subject doesn't have both labels"));

	/* If the single is EQUAL, it's ok. */
	if (ml->ml_single.mle_type == MAC_LOMAC_TYPE_EQUAL)
		return (0);

	/* If either range endpoint is EQUAL, it's ok. */
	if (ml->ml_rangelow.mle_type == MAC_LOMAC_TYPE_EQUAL ||
	    ml->ml_rangehigh.mle_type == MAC_LOMAC_TYPE_EQUAL)
		return (0);

	/* If the range is low-high, it's ok. */
	if (ml->ml_rangelow.mle_type == MAC_LOMAC_TYPE_LOW &&
	    ml->ml_rangehigh.mle_type == MAC_LOMAC_TYPE_HIGH)
		return (0);

	/* It's not ok. */
	return (EPERM);
}

static int
lomac_high_single(struct mac_lomac *ml)