Date: Thu, 1 Aug 2002 10:14:28 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern vfs_vnops.c Message-ID: <200208011714.g71HETSw009145@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2002/08/01 10:14:28 PDT
Modified files:
sys/kern vfs_vnops.c
Log:
Introduce support for Mandatory Access Control and extensible
kernel access control.
Restructure the vn_open_cred() access control checks to invoke
the MAC entry point for open authorization. Note that MAC can
reject open requests where existing DAC code skips the open
authorization check due to O_CREAT. However, the failure mode
here is the same as other failure modes following creation,
wherein an empty file may be left behind.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
Revision Changes Path
1.155 +21 -11 src/sys/kern/vfs_vnops.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200208011714.g71HETSw009145>