From owner-cvs-all  Wed Jul 31  9: 5:40 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 648B137B401; Wed, 31 Jul 2002 09:05:32 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 0BC8F43E5E; Wed, 31 Jul 2002 09:05:32 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g6VG5VJU091429;
	Wed, 31 Jul 2002 09:05:31 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g6VG5VBg091272;
	Wed, 31 Jul 2002 09:05:31 -0700 (PDT)
Message-Id: <200207311605.g6VG5VBg091272@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 31 Jul 2002 09:05:31 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/ufs/ufs ufs_vnops.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/07/31 09:05:30 PDT

  Modified files:
    sys/ufs/ufs          ufs_vnops.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Instrument UFS to support per-inode MAC labels.  In particular,
  invoke MAC framework entry points for generically supporting the
  backing of MAC labels into extended attributes.  This ends up
  introducing new vnode operation vector entries point at the MAC
  framework entry points, as well as some explicit entry point
  invocations for file and directory creation events so that the
  MAC framework can push labels to disk before the directory names
  become persistent (this will work better once EAs in UFS2 are
  hooked into soft updates).  The generic EA MAC entry points
  support executing with the file system in either single label
  or multilabel operation, and will fall back to the mount label
  if multilabel is not specified at mount-time.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.201     +31 -1     src/sys/ufs/ufs/ufs_vnops.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message