From owner-p4-projects@FreeBSD.ORG Sat Jul 8 11:16:56 2006 Return-Path: X-Original-To: p4-projects@freebsd.org Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 173F316A4E2; Sat, 8 Jul 2006 11:16:56 +0000 (UTC) X-Original-To: perforce@freebsd.org Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CDF9B16A4DD for ; Sat, 8 Jul 2006 11:16:55 +0000 (UTC) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9401D43D49 for ; Sat, 8 Jul 2006 11:16:55 +0000 (GMT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k68BGt6M026207 for ; Sat, 8 Jul 2006 11:16:55 GMT (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k68BGtaT026193 for perforce@freebsd.org; Sat, 8 Jul 2006 11:16:55 GMT (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Date: Sat, 8 Jul 2006 11:16:55 GMT Message-Id: <200607081116.k68BGtaT026193@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson To: Perforce Change Reviews Cc: Subject: PERFORCE change 100978 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Jul 2006 11:16:56 -0000 http://perforce.freebsd.org/chv.cgi?CH=100978 Change 100978 by rwatson@rwatson_zoo on 2006/07/08 11:15:56 More notes. Affected files ... .. //depot/projects/trustedbsd/mac2/mac2_notes.txt#3 edit Differences ... ==== //depot/projects/trustedbsd/mac2/mac2_notes.txt#3 (text+ko) ==== @@ -10,7 +10,8 @@ (removing '_from_', etc), and make things much more legible and consistent. -- Add a new subsystem class netinet to hold netinet-related methods. +- Add a new subsystem class _netinet_ to hold netinet-related methods. + Added a pseudo-class, _policy_ for policy-related events (init, destroy). - Resort entry points in mac_framework.h, mac_policy.h by object rather than method. This significantly improves readability. @@ -18,6 +19,11 @@ - Split mac.h into mac.h and mac_framework.h, breaking out user and kernel APIs into separate kernel include files. +- Remove mount_fs label, which has generally gone unused. + +- Rename all devfs entry points to be mac_devfs_foo() rather than having + some be mac_devfsdirent_foo(). + Planned changes: - Accessor methods for slot data based on functions, in order to avoid @@ -56,3 +62,7 @@ are only used for objects requested by the policy. I.e., policies can request only a cred label slot, etc. This could then be used to key memory allocation overhead on more objects. + +- Move from just init/destroy to also attach/detach methods for the policy, + so that memory allocation can be performed without the mac policy lock + held.