From owner-p4-projects@FreeBSD.ORG  Sun Jul 22 20:55:49 2012
Return-Path: <owner-p4-projects@FreeBSD.ORG>
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 3A0081065721; Sun, 22 Jul 2012 20:55:48 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4B25510656A4
	for <perforce@freebsd.org>; Sun, 22 Jul 2012 20:55:48 +0000 (UTC)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from skunkworks.freebsd.org (skunkworks.freebsd.org
	[IPv6:2001:4f8:fff6::2d])
	by mx1.freebsd.org (Postfix) with ESMTP id 0C1128FC08
	for <perforce@freebsd.org>; Sun, 22 Jul 2012 20:55:48 +0000 (UTC)
Received: from skunkworks.freebsd.org (localhost [127.0.0.1])
	by skunkworks.freebsd.org (8.14.4/8.14.4) with ESMTP id q6MKtgMU081244
	for <perforce@freebsd.org>; Sun, 22 Jul 2012 20:55:47 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
	by skunkworks.freebsd.org (8.14.4/8.14.4/Submit) id q6MKtaZn081239
	for perforce@freebsd.org; Sun, 22 Jul 2012 20:55:36 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 22 Jul 2012 20:55:36 GMT
Message-Id: <201207222055.q6MKtaZn081239@skunkworks.freebsd.org>
X-Authentication-Warning: skunkworks.freebsd.org: perforce set sender to
	bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
To: Perforce Change Reviews <perforce@freebsd.org>
Precedence: bulk
Cc: 
Subject: PERFORCE change 214779 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 22 Jul 2012 20:55:49 -0000

http://p4web.freebsd.org/@@214779?ac=10

Change 214779 by rwatson@rwatson_fledge on 2012/07/22 20:54:42

	Include some additional words on use of the MAC Framework, and
	a pointer to my dissertation which includes two chapters on its
	architecture and deployment in products.

Affected files ...

.. //depot/projects/trustedbsd/www/mac.page#7 edit

Differences ...

==== //depot/projects/trustedbsd/www/mac.page#7 (text+ko) ====

@@ -1,5 +1,5 @@
 <!--
-     Copyright (c) 2000, 2001 Robert N. M. Watson
+     Copyright (c) 2000-2012 Robert N. M. Watson
      Copyright (c) 2001 Leigh Denault
      Copyright (c) 2002, 2003 Networks Associates Technology, Inc.
      All rights reserved.
@@ -37,7 +37,7 @@
 
   <cvs:keywords xmlns:cvs="http://www.FreeBSD.org/XML/CVS" version="1.0">
     <cvs:keyword name="freebsd">
-      $P4: //depot/projects/trustedbsd/www/mac.page#6 $
+      $P4: //depot/projects/trustedbsd/www/mac.page#7 $
     </cvs:keyword>
   </cvs:keywords>
 
@@ -68,14 +68,22 @@
 
       <p>MAC Framework and general MAC user documentation and a number of
 	implementation papers may be found on the <a
-	href="docs.html">documentation page</a>.</p>
+	href="docs.html">documentation page</a>.  A detailed discussion of
+	the architecture and industry adoption of the MAC Framework,
+	including use in FreeBSD and Apple's Mac OS X and iOS, may be found
+	in Robert Watson's PhD Dissertation, <a
+	href="http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-818.html">New
+	Approaches to Operating System Security Extensibility</a>.</p>
 
-      <p>The TrustedBSD MAC Framework is also present in Mac
-	OS X as of the Leopard release, where it is used to implement
-	Seatbelt and other system security services.  The port of the MAC
+      <p>The TrustedBSD MAC Framework has also been present in Mac OS X
+	releases as of "Leopard", where it is used to implement Seatbelt
+	and other system security services; on the iPhone and iPad, the
+	MAC Framework is used for App sandboxing.  This port of the MAC
 	Framework was performed initially as part of <a
 	href="sedarwin.html">SEDarwin</a>, which also included a port of
-	FLASK and SELinux to the Mac OS X platform.</p>
+	FLASK and SELinux to the Mac OS X platform.  Other prominent
+	industry consumers of the MAC Framework include Juniper Networks
+	and McAfee (now Intel).</p>
 
     </html>
   </section>