From owner-cvs-all  Wed Jul 31 10:17:58 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id B90F137B401; Wed, 31 Jul 2002 10:17:52 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 8AE8E43E4A; Wed, 31 Jul 2002 10:17:51 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g6VHHpJU008719;
	Wed, 31 Jul 2002 10:17:51 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g6VHHp1k008718;
	Wed, 31 Jul 2002 10:17:51 -0700 (PDT)
Message-Id: <200207311717.g6VHHp1k008718@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 31 Jul 2002 10:17:51 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/netinet ip_input.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/07/31 10:17:51 PDT

  Modified files:
    sys/netinet          ip_input.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Instrument the code managing IP fragment reassembly queues (struct ipq)
  to invoke appropriate MAC entry points to maintain a MAC label on
  each queue.  Permit MAC policies to associate information with a queue
  based on the mbuf that caused it to be created, update that information
  based on further mbufs accepted by the queue, influence the decision
  making process by which mbufs are accepted to the queue, and set the
  label of the mbuf holding the reassembled datagram following reassembly
  completetion.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.205     +17 -0     src/sys/netinet/ip_input.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message