From owner-cvs-all  Thu Aug  1 10:23:27 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D295F37B401; Thu,  1 Aug 2002 10:23:22 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 8C0F943E5E; Thu,  1 Aug 2002 10:23:22 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g71HNMJU015144;
	Thu, 1 Aug 2002 10:23:22 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g71HNMe1015143;
	Thu, 1 Aug 2002 10:23:22 -0700 (PDT)
Message-Id: <200208011723.g71HNMe1015143@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 1 Aug 2002 10:23:22 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern vfs_vnops.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/08/01 10:23:22 PDT

  Modified files:
    sys/kern             vfs_vnops.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control
  
  Invoke appropriate MAC framework entry points to authorize a number
  of vnode operations, including read, write, stat, poll.  This permits
  MAC policies to revoke access to files following label changes,
  and to limit information spread about the file to user processes.
  
  Note: currently the file cached credential is used for some of
  these authorization check.  We will need to expand some of the
  MAC entry point APIs to permit multiple creds to be passed to
  the access control check to allow diverse policy behavior.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.156     +39 -4     src/sys/kern/vfs_vnops.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message