From owner-p4-projects Tue Oct 22 10:17:47 2002 Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 31F0937B404; Tue, 22 Oct 2002 10:17:45 -0700 (PDT) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D461A37B401 for ; Tue, 22 Oct 2002 10:17:44 -0700 (PDT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7228743E6E for ; Tue, 22 Oct 2002 10:17:44 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id g9MHH9mV017321 for ; Tue, 22 Oct 2002 10:17:09 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.12.6/8.12.6/Submit) id g9MHH9Xf017318 for perforce@freebsd.org; Tue, 22 Oct 2002 10:17:09 -0700 (PDT) Date: Tue, 22 Oct 2002 10:17:09 -0700 (PDT) Message-Id: <200210221717.g9MHH9Xf017318@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson Subject: PERFORCE change 19906 for review To: Perforce Change Reviews Sender: owner-p4-projects@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG http://perforce.freebsd.org/chv.cgi?CH=19906 Change 19906 by rwatson@rwatson_tislabs on 2002/10/22 10:17:08 By popular request, remove mac_te, the experimental type enforcement policy. SEBSD does a much better job of TE, and this experimental policy never really got off the ground (but did cause a lot of work to be done every time we modified the framework :-). Affected files ... .. //depot/projects/trustedbsd/mac/MACREADME#23 edit .. //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 edit .. //depot/projects/trustedbsd/mac/sys/conf/files#63 edit .. //depot/projects/trustedbsd/mac/sys/conf/options#37 edit .. //depot/projects/trustedbsd/mac/sys/modules/mac_te/Makefile#2 delete .. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.c#90 delete .. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.h#13 delete Differences ... ==== //depot/projects/trustedbsd/mac/MACREADME#23 (text+ko) ==== @@ -29,7 +29,6 @@ mac_none_load="NO" # Null MAC policy mac_partition_load="NO" # Partition MAC policy mac_seeotheruids_load="NO" # UID visbility MAC policy -mac_te_load="NO" # Type Enforcement policy (boot only) sebsd_load="NO" # Port of SELinux/FLASK (boot only) ==== //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 (text+ko) ==== @@ -768,7 +768,6 @@ options MAC_NONE options MAC_PARTITION options MAC_SEEOTHERUIDS -options MAC_TE options MAC_TEST ==== //depot/projects/trustedbsd/mac/sys/conf/files#63 (text+ko) ==== @@ -1502,7 +1502,6 @@ security/mac_none/mac_none.c optional mac_none security/mac_partition/mac_partition.c optional mac_partition security/mac_seeotheruids/mac_seeotheruids.c optional mac_seeotheruids -security/mac_te/mac_te.c optional mac_te security/mac_test/mac_test.c optional mac_test security/sebsd/sebsd.c optional sebsd security/sebsd/sebsd_syscall.c optional sebsd ==== //depot/projects/trustedbsd/mac/sys/conf/options#37 (text+ko) ==== @@ -154,7 +154,6 @@ MAC_NONE opt_dontuse.h MAC_PARTITION opt_dontuse.h MAC_SEEOTHERUIDS opt_dontuse.h -MAC_TE opt_dontuse.h MAC_TEST opt_dontuse.h SEBSD opt_dontuse.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message