From owner-freebsd-hackers@FreeBSD.ORG Sat Feb 12 19:09:00 2011 Return-Path: Delivered-To: hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F40191065672; Sat, 12 Feb 2011 19:08:59 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id CEBC18FC0A; Sat, 12 Feb 2011 19:08:59 +0000 (UTC) Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by cyrus.watson.org (Postfix) with ESMTPS id 66E4246B23; Sat, 12 Feb 2011 14:08:59 -0500 (EST) Date: Sat, 12 Feb 2011 19:08:59 +0000 (GMT) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: Alexander Leidinger In-Reply-To: <20110212151442.000016bb@unknown> Message-ID: References: <20110211103028.12684f54yrw8tgqo@webmail.leidinger.net> <20110212151442.000016bb@unknown> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: hackers@freebsd.org, kibab@freebsd.org Subject: Re: CFR: FEATURE macros for AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/PMC/SYSV/... X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Feb 2011 19:09:00 -0000 On Sat, 12 Feb 2011, Alexander Leidinger wrote: > On Sat, 12 Feb 2011 00:52:48 +0000 (GMT) Robert Watson > wrote: > >> The one comment I'd make is that the MAC case should indicate that "The MAC >> Framework" is supported, rather than mandatory access controls being >> present -- the presence of the framework doesn't imply the presence of >> mandatory access control policies. > > Does > FEATURE(mac, "Mandatory Access Control Framework support"); > look better? > > Alternatively/additionally we could use mac_framework as the name of the > feature. The above seems fine -- while I've been moving to names like mac_framework.h, it's still "options MAC" and "security/mac", etc, and think that "mac" is the most consistent options. Robert