From owner-cvs-all  Tue Jul 30 20: 3:26 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2059337B400; Tue, 30 Jul 2002 20:03:23 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id DC3AA43E3B; Tue, 30 Jul 2002 20:03:22 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g6V33MJU032284;
	Tue, 30 Jul 2002 20:03:22 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g6V33MEg032282;
	Tue, 30 Jul 2002 20:03:22 -0700 (PDT)
Message-Id: <200207310303.g6V33MEg032282@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Tue, 30 Jul 2002 20:03:22 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern uipc_socket.c uipc_socket2.c
         uipc_usrreq.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/07/30 20:03:22 PDT

  Modified files:
    sys/kern             uipc_socket.c uipc_socket2.c 
                         uipc_usrreq.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Invoke the necessary MAC entry points to maintain labels on sockets.
  In particular, invoke entry points during socket allocation and
  destruction, as well as creation by a process or during an
  accept-scenario (sonewconn).  For UNIX domain sockets, also assign
  a peer label.  As the socket code isn't locked down yet, locking
  interactions are not yet clear.  Various protocol stack socket
  operations (such as peer label assignment for IPv4) will follow.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.127     +11 -0     src/sys/kern/uipc_socket.c
  1.100     +6 -0      src/sys/kern/uipc_socket2.c
  1.94      +6 -0      src/sys/kern/uipc_usrreq.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message