From owner-cvs-all  Thu Aug  1 10:41:33 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8106C37B400; Thu,  1 Aug 2002 10:41:28 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 3C10243E65; Thu,  1 Aug 2002 10:41:28 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g71HfSJU019084;
	Thu, 1 Aug 2002 10:41:28 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g71HfSF4019083;
	Thu, 1 Aug 2002 10:41:28 -0700 (PDT)
Message-Id: <200208011741.g71HfSF4019083@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 1 Aug 2002 10:41:28 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/modules Makefile src/sys/modules/mac_biba
         Makefile src/sys/modules/mac_bsdextended Makefile
         src/sys/modules/mac_ifoff Makefile src/sys/modules/mac_mls
         Makefile src/sys/modules/mac_none Makefile ...
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/08/01 10:41:27 PDT

  Modified files:
    sys/modules          Makefile 
  Added files:
    sys/modules/mac_biba Makefile 
    sys/modules/mac_bsdextended Makefile 
    sys/modules/mac_ifoff Makefile 
    sys/modules/mac_mls  Makefile 
    sys/modules/mac_none Makefile 
    sys/modules/mac_seeotheruids Makefile 
    sys/modules/mac_test Makefile 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Hook up various policy modules to the kernel build.
  
  Note that a number of these modules require futher entry point commits
  in the remainder of the kernel to become fully functional, but enough
  of the pieces are in place to allow experimentation.
  
  Note also that it would be desirable to not build the mac_*.ko modules
  if 'options MAC' is not defined in the kernel configuration, because
  the resulting modules are not useful without the kernel option.  There
  doesn't appear to be precedent for a way to do this -- for example,
  we allow ipfw.ko to be built even if 'options NETINET' isn't defined.
  Suggests welcomed on the "best" way to do this.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.248     +7 -0      src/sys/modules/Makefile
  1.1       +10 -0     src/sys/modules/mac_biba/Makefile (new)
  1.1       +9 -0      src/sys/modules/mac_bsdextended/Makefile (new)
  1.1       +10 -0     src/sys/modules/mac_ifoff/Makefile (new)
  1.1       +10 -0     src/sys/modules/mac_mls/Makefile (new)
  1.1       +10 -0     src/sys/modules/mac_none/Makefile (new)
  1.1       +9 -0      src/sys/modules/mac_seeotheruids/Makefile (new)
  1.1       +10 -0     src/sys/modules/mac_test/Makefile (new)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message