From owner-cvs-all@FreeBSD.ORG  Thu Aug 21 06:53:02 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7B4B216A4BF; Thu, 21 Aug 2003 06:53:02 -0700 (PDT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 2459F43FBF; Thu, 21 Aug 2003 06:53:02 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h7LDr10U071697;
	Thu, 21 Aug 2003 06:53:01 -0700 (PDT)
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h7LDr1q0071696;
	Thu, 21 Aug 2003 06:53:01 -0700 (PDT)
Message-Id: <200308211353.h7LDr1q0071696@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 21 Aug 2003 06:53:01 -0700 (PDT)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/sys mac.h mac_policy.h src/sys/kern kern_mac.c
 vfs_syscalls.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Aug 2003 13:53:02 -0000

rwatson     2003/08/21 06:53:01 PDT

  FreeBSD src repository

  Modified files:
    sys/sys              mac.h mac_policy.h 
    sys/kern             kern_mac.c vfs_syscalls.c 
  Log:
  Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():
  explicit access control checks to delete and list extended attributes
  on a vnode, rather than implicitly combining with the setextattr and
  getextattr checks.  This reflects EA API changes in the kernel made
  recently, including the move to explicit VOP's for both of these
  operations.
  
  Obtained from:  TrustedBSD PRoject
  Sponsored by:   DARPA, Network Associates Laboratories
  
  Revision  Changes    Path
  1.96      +32 -0     src/sys/kern/kern_mac.c
  1.331     +3 -4      src/sys/kern/vfs_syscalls.c
  1.41      +4 -0      src/sys/sys/mac.h
  1.42      +5 -0      src/sys/sys/mac_policy.h