Date: Wed, 31 Jul 2002 08:45:17 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/fs/devfs devfs_devs.c devfs_vfsops.c devfs_vnops.c Message-ID: <200207311545.g6VFjIQX086834@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2002/07/31 08:45:17 PDT
Modified files:
sys/fs/devfs devfs_devs.c devfs_vfsops.c devfs_vnops.c
Log:
Introduce support for Mandatory Access Control and extensible
kernel access control.
Instrument devfs to support per-dirent MAC labels. In particular,
invoke MAC framework when devfs directory entries are instantiated
due to make_dev() and related calls, and invoke the MAC framework
when vnodes are instantiated from these directory entries. Implement
vop_setlabel() for devfs, which pushes the label update into the
devfs directory entry for semi-persistant store. This permits the MAC
framework to assign labels to devices and directories as they are
instantiated, and export access control information via devfs vnodes.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
Revision Changes Path
1.21 +15 -0 src/sys/fs/devfs/devfs_devs.c
1.22 +8 -0 src/sys/fs/devfs/devfs_vfsops.c
1.42 +67 -0 src/sys/fs/devfs/devfs_vnops.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207311545.g6VFjIQX086834>