From owner-cvs-all@FreeBSD.ORG Sun Apr 22 16:18:10 2007 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E9ECC16A402; Sun, 22 Apr 2007 16:18:10 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [69.147.83.41]) by mx1.freebsd.org (Postfix) with ESMTP id D96FC13C457; Sun, 22 Apr 2007 16:18:10 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.8/8.13.8) with ESMTP id l3MGIAO1059031; Sun, 22 Apr 2007 16:18:10 GMT (envelope-from rwatson@repoman.freebsd.org) Received: (from rwatson@localhost) by repoman.freebsd.org (8.13.8/8.13.8/Submit) id l3MGIARB059030; Sun, 22 Apr 2007 16:18:10 GMT (envelope-from rwatson) Message-Id: <200704221618.l3MGIARB059030@repoman.freebsd.org> From: Robert Watson Date: Sun, 22 Apr 2007 16:18:10 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: src/sys/security/mac mac_policy.h mac_vfs.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_mls mac_mls.c src/sys/security/mac_stub mac_stub.c src/sys/security/mac_test ... X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Apr 2007 16:18:11 -0000 rwatson 2007-04-22 16:18:10 UTC FreeBSD src repository Modified files: sys/security/mac mac_policy.h mac_vfs.c sys/security/mac_biba mac_biba.c sys/security/mac_lomac mac_lomac.c sys/security/mac_mls mac_mls.c sys/security/mac_stub mac_stub.c sys/security/mac_test mac_test.c sys/sys mount.h Log: In the MAC Framework implementation, file systems have two per-mountpoint labels: the mount label (label of the mountpoint) and the fs label (label of the file system). In practice, policies appear to only ever use one, and the distinction is not helpful. Combine mnt_mntlabel and mnt_fslabel into a single mnt_label, and eliminate extra machinery required to maintain the additional label. Update policies to reflect removal of extra entry points and label. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc. Revision Changes Path 1.89 +5 -9 src/sys/security/mac/mac_policy.h 1.120 +11 -33 src/sys/security/mac/mac_vfs.c 1.104 +8 -12 src/sys/security/mac_biba/mac_biba.c 1.48 +8 -12 src/sys/security/mac_lomac/mac_lomac.c 1.84 +8 -12 src/sys/security/mac_mls/mac_mls.c 1.64 +5 -7 src/sys/security/mac_stub/mac_stub.c 1.74 +9 -30 src/sys/security/mac_test/mac_test.c 1.226 +1 -2 src/sys/sys/mount.h