Add an annotation to the comment for sysv_ipc.c to indicate that the

MAC Framework doesn't require checks in ipcperm() because checks
relating to System V IPC will be performed in individual IPC
implementations.

1 files changed, 6 insertions, 2 deletions

diff --git a/sys/kern/sysv_ipc.c b/sys/kern/sysv_ipc.c
index cc8531dcbab6..e8ea41d89cbf 100644
--- a/sys/kern/sysv_ipc.c
+++ b/sys/kern/sysv_ipc.c
@@ -67,9 +67,13 @@ shmexit(struct vmspace *vm)
 }
 
 /*
- * Check for ipc permission
+ * Check for IPC permission.
+ *
+ * Note: The MAC Framework does not require any modifications to the
+ * ipcperm() function, as access control checks are performed throughout the
+ * implementation of each primitive.  Those entry point calls complement the
+ * ipcperm() discertionary checks.
  */
-
 int
 ipcperm(td, perm, mode)
 	struct thread *td;