From owner-cvs-all  Thu Mar 21 18:28:30 2002
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0834337B400; Thu, 21 Mar 2002 18:28:27 -0800 (PST)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g2M2SRL92598;
	Thu, 21 Mar 2002 18:28:27 -0800 (PST)
	(envelope-from rwatson)
Message-Id: <200203220228.g2M2SRL92598@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 21 Mar 2002 18:28:26 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern kern_prot.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/03/21 18:28:26 PST

  Modified files:
    sys/kern             kern_prot.c 
  Log:
  Break out the "see_other_uids" policy check from the various
  method-based inter-process security checks.  To do this, introduce
  a new cr_seeotheruids(u1, u2) function, which encapsulates the
  "see_other_uids" logic.  Call out to this policy following the
  jail security check for all of {debug,sched,see,signal} inter-process
  checks.  This more consistently enforces the check, and makes the
  check easy to modify.  Eventually, it may be that this check should
  become a MAC policy, loaded via a module.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.142     +28 -4     src/sys/kern/kern_prot.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message