From owner-cvs-src@FreeBSD.ORG  Mon Jul 10 19:13:33 2006
Return-Path: <owner-cvs-src@FreeBSD.ORG>
X-Original-To: cvs-src@FreeBSD.org
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3BC0516A4DF;
	Mon, 10 Jul 2006 19:13:33 +0000 (UTC)
	(envelope-from csjp@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B0C2E43D72;
	Mon, 10 Jul 2006 19:13:32 +0000 (GMT)
	(envelope-from csjp@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k6AJDWSg057866;
	Mon, 10 Jul 2006 19:13:32 GMT
	(envelope-from csjp@repoman.freebsd.org)
Received: (from csjp@localhost)
	by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k6AJDWb8057865;
	Mon, 10 Jul 2006 19:13:32 GMT (envelope-from csjp)
Message-Id: <200607101913.k6AJDWb8057865@repoman.freebsd.org>
From: "Christian S.J. Peron" <csjp@FreeBSD.org>
Date: Mon, 10 Jul 2006 19:13:32 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/security/mac_biba mac_biba.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Jul 2006 19:13:33 -0000

csjp        2006-07-10 19:13:32 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac_biba mac_biba.c 
  Log:
  Implement mpo_associate_nfsd_label entry point for the BIBA security policy,
  we will initialize the label to biba/low for files that have been created
  through an NFS RPC. This is a safe default given the default nature of our
  NFS implementation, there is not a whole lot of data integrity there by
  default. This also fixes kernel panics associated with file creation over NFS
  while creating files on filesystems which have multilabel enabled with BIBA
  enabled.
  
  MFC after:      2 weeks
  Discussed with: rwatson
  
  Revision  Changes    Path
  1.92      +13 -0     src/sys/security/mac_biba/mac_biba.c