Date: Sat, 5 Oct 2002 19:46:26 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_mac.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_mls mac_mls.c src/sys/security/mac_none mac_none.c src/sys/security/mac_test mac_test.c src/sys/sys mac.h mac_policy.h Message-ID: <200210060246.g962kRLj034167@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2002/10/05 19:46:26 PDT
Modified files:
sys/kern kern_mac.c
sys/security/mac_biba mac_biba.c
sys/security/mac_mls mac_mls.c
sys/security/mac_none mac_none.c
sys/security/mac_test mac_test.c
sys/sys mac.h mac_policy.h
Log:
Sync from MAC tree: break out the single mmap entry point into
seperate entry points for each occasion:
mac_check_vnode_mmap() Check at initial mapping
mac_check_vnode_mprotect() Check at mapping protection change
mac_check_vnode_mmap_downgrade() Determine if a mapping downgrade
should take place following
subject relabel.
Implement mmap() and mprotect() entry points for labeled vnode
policies. These entry points are currently not hooked up to the
VM system in the base tree. These changes improve the consistency
of the access control interface and offer more flexibility regarding
limiting access to vnode mmaping.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.40 +63 -18 src/sys/kern/kern_mac.c
1.17 +32 -22 src/sys/security/mac_biba/mac_biba.c
1.15 +32 -22 src/sys/security/mac_mls/mac_mls.c
1.12 +22 -2 src/sys/security/mac_none/mac_none.c
1.11 +22 -2 src/sys/security/mac_test/mac_test.c
1.13 +4 -3 src/sys/sys/mac.h
1.15 +9 -3 src/sys/sys/mac_policy.h
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210060246.g962kRLj034167>