[Midnightbsd-cvs] src [11640] trunk/etc/rc.d/ugidfw: run after filesystems

[laffer1 at midnightbsd.org]

Revision: 11640
          http://svnweb.midnightbsd.org/src/?rev=11640
Author:   laffer1
Date:     2018-07-08 13:49:03 -0400 (Sun, 08 Jul 2018)
Log Message:
-----------
run after filesystems

Modified Paths:
--------------
    trunk/etc/rc.d/ugidfw

Modified: trunk/etc/rc.d/ugidfw
===================================================================
--- trunk/etc/rc.d/ugidfw	2018-07-08 17:48:29 UTC (rev 11639)
+++ trunk/etc/rc.d/ugidfw	2018-07-08 17:49:03 UTC (rev 11640)
@@ -3,6 +3,7 @@
 # $MidnightBSD$
 
 # PROVIDE: ugidfw
+# REQUIRE: FILESYSTEMS
 # BEFORE: LOGIN
 # KEYWORD: nojail shutdown
 
@@ -33,9 +34,17 @@
 
 ugidfw_stop()
 {
+	local rulecount
+
 	# Disable the policy
 	#
-	kldunload mac_bsdextended
+	# Check for the existence of rules and flush them if needed.
+	rulecount=$(sysctl -in security.mac.bsdextended.rule_count)
+	if [ ${rulecount:-0} -gt 0 ]; then
+		ugidfw list | sed -n '2,$p' | cut -d ' ' -f 1 | sort -r -n |
+		    xargs -n 1 ugidfw remove
+		echo "MAC bsdextended rules flushed."
+	fi
 }
 
 load_rc_config $name