From owner-p4-projects Thu Sep 12 18:58:18 2002 Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 53F9D37B401; Thu, 12 Sep 2002 18:58:09 -0700 (PDT) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9B96F37B400 for ; Thu, 12 Sep 2002 18:58:08 -0700 (PDT) Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3B8E243E3B for ; Thu, 12 Sep 2002 18:58:08 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from freefall.freebsd.org (perforce@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g8D1w7JU055071 for ; Thu, 12 Sep 2002 18:58:07 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g8D1w7hg055068 for perforce@freebsd.org; Thu, 12 Sep 2002 18:58:07 -0700 (PDT) Date: Thu, 12 Sep 2002 18:58:07 -0700 (PDT) Message-Id: <200209130158.g8D1w7hg055068@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson Subject: PERFORCE change 17426 for review To: Perforce Change Reviews Sender: owner-p4-projects@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG http://people.freebsd.org/~peter/p4db/chv.cgi?CH=17426 Change 17426 by rwatson@rwatson_paprika on 2002/09/12 18:57:59 Provide static linking options for most policies. This means that when we build NOTES/LINT, we'll get INVARIANTS support; also, that users can statically link security modules if the risks of loadable modules concern them, or their environment does not support klds. Affected files ... .. //depot/projects/trustedbsd/mac/sys/conf/NOTES#16 edit .. //depot/projects/trustedbsd/mac/sys/conf/files#48 edit .. //depot/projects/trustedbsd/mac/sys/conf/options#27 edit Differences ... ==== //depot/projects/trustedbsd/mac/sys/conf/NOTES#16 (text+ko) ==== @@ -729,8 +729,16 @@ # Support for Mandatory Access Control (MAC) options MAC +options MAC_BIBA +options MAC_BSDEXTENDED options MAC_DEBUG -#options MAC_NONE # Statically link mac_none policy +options MAC_IFOFF +options MAC_MLS +options MAC_NONE +options MAC_PARTITION +options MAC_SEEOTHERUIDS +options MAC_TE +options MAC_TEST ##################################################################### ==== //depot/projects/trustedbsd/mac/sys/conf/files#48 (text+ko) ==== @@ -1356,9 +1356,17 @@ posix4/ksched.c optional _kposix_priority_scheduling posix4/p1003_1b.c standard posix4/posix4_mib.c standard -security/mac_none/mac_none.c optional mac_none +security/mac_biba/mac_biba.c optional mac_biba +security/mac_bsdextended/mac_bsdextended.c optional mac_bsdextended +security/mac_ifoff/mac_ifoff.c optional mac_ifoff security/mac_lomac/mac_lomac.c optional mac_lomac security/mac_lomac/kernel_plm.c optional mac_lomac +security/mac_mls/mac_mls.c optional mac_mls +security/mac_none/mac_none.c optional mac_none +security/mac_partition/mac_partition.c optional mac_partition +security/mac_seeotheruids/mac_seeotheruids.c optional mac_seeotheruids +security/mac_te/mac_te.c optional mac_te +security/mac_test/mac_test.c optional mac_test ufs/ffs/ffs_alloc.c optional ffs ufs/ffs/ffs_balloc.c optional ffs ufs/ffs/ffs_inode.c optional ffs ==== //depot/projects/trustedbsd/mac/sys/conf/options#27 (text+ko) ==== @@ -125,9 +125,17 @@ # Support for Mandatory Access Control (MAC) MAC opt_mac.h +MAC_BIBA opt_dontuse.h +MAC_BSDEXTENDED opt_dontuse.h MAC_DEBUG opt_mac.h +MAC_IFOFF opt_dontuse.h MAC_LOMAC opt_dontuse.h +MAC_MLS opt_dontuse.h MAC_NONE opt_dontuse.h +MAC_PARTITION opt_dontuse.h +MAC_SEEOTHERUIDS opt_dontuse.h +MAC_TE opt_dontuse.h +MAC_TEST opt_dontuse.h # Do we want the config file compiled into the kernel? INCLUDE_CONFIG_FILE opt_config.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message