Date: Sun, 6 Oct 2002 07:39:16 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/compat/svr4 svr4_stream.c src/sys/kern kern_mac.c sys_socket.c uipc_syscalls.c src/sys/sys mac.h mac_policy.h Message-ID: <200210061439.g96EdGXe032721@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2002/10/06 07:39:16 PDT
Modified files:
sys/compat/svr4 svr4_stream.c
sys/kern kern_mac.c sys_socket.c uipc_syscalls.c
sys/sys mac.h mac_policy.h
Log:
Integrate mac_check_socket_send() and mac_check_socket_receive()
checks from the MAC tree: allow policies to perform access control
for the ability of a process to send and receive data via a socket.
At some point, we might also pass in additional address information
if an explicit address is requested on send.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.36 +17 -0 src/sys/compat/svr4/svr4_stream.c
1.41 +34 -0 src/sys/kern/kern_mac.c
1.46 +17 -0 src/sys/kern/sys_socket.c
1.132 +22 -0 src/sys/kern/uipc_syscalls.c
1.14 +2 -0 src/sys/sys/mac.h
1.16 +6 -0 src/sys/sys/mac_policy.h
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210061439.g96EdGXe032721>