Date: Sat, 5 Oct 2002 08:10:00 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_mac.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_mls mac_mls.c src/sys/security/mac_none mac_none.c src/sys/security/mac_test mac_test.c src/sys/sys mac_policy.h Message-ID: <200210051510.g95FA0uD097546@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2002/10/05 08:10:00 PDT
Modified files:
sys/kern kern_mac.c
sys/security/mac_biba mac_biba.c
sys/security/mac_mls mac_mls.c
sys/security/mac_none mac_none.c
sys/security/mac_test mac_test.c
sys/sys mac_policy.h
Log:
Begin another merge from the TrustedBSD MAC branch:
- Change mpo_init_foo(obj, label) and mpo_destroy_foo(obj, label) policy
entry points to mpo_init_foo_label(label) and
mpo_destroy_foo_label(label). This will permit the use of the same
entry points for holding temporary type-specific label during
internalization and externalization, as well as for caching purposes.
- Because of this, break out mpo_{init,destroy}_socket() and
mpo_{init,destroy}_mount() into seperate entry points for socket
main/peer labels and mount main/fs labels.
- Since the prototype for label initialization is the same across almost
all entry points, implement these entry points using common
implementations for Biba, MLS, and Test, reducing the number of
almost identical looking functions.
This simplifies policy implementation, as well as preparing us for the
merge of the new flexible userland API for managing labels on objects.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.28 +86 -68 src/sys/kern/kern_mac.c
1.13 +58 -205 src/sys/security/mac_biba/mac_biba.c
1.11 +58 -205 src/sys/security/mac_mls/mac_mls.c
1.8 +55 -167 src/sys/security/mac_none/mac_none.c
1.7 +140 -84 src/sys/security/mac_test/mac_test.c
1.11 +53 -50 src/sys/sys/mac_policy.h
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210051510.g95FA0uD097546>