Date: Sun, 22 Apr 2007 16:18:10 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/security/mac mac_policy.h mac_vfs.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_mls mac_mls.c src/sys/security/mac_stub mac_stub.c src/sys/security/mac_test ... Message-ID: <200704221618.l3MGIARB059030@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2007-04-22 16:18:10 UTC
FreeBSD src repository
Modified files:
sys/security/mac mac_policy.h mac_vfs.c
sys/security/mac_biba mac_biba.c
sys/security/mac_lomac mac_lomac.c
sys/security/mac_mls mac_mls.c
sys/security/mac_stub mac_stub.c
sys/security/mac_test mac_test.c
sys/sys mount.h
Log:
In the MAC Framework implementation, file systems have two per-mountpoint
labels: the mount label (label of the mountpoint) and the fs label (label
of the file system). In practice, policies appear to only ever use one,
and the distinction is not helpful.
Combine mnt_mntlabel and mnt_fslabel into a single mnt_label, and
eliminate extra machinery required to maintain the additional label.
Update policies to reflect removal of extra entry points and label.
Obtained from: TrustedBSD Project
Sponsored by: SPARTA, Inc.
Revision Changes Path
1.89 +5 -9 src/sys/security/mac/mac_policy.h
1.120 +11 -33 src/sys/security/mac/mac_vfs.c
1.104 +8 -12 src/sys/security/mac_biba/mac_biba.c
1.48 +8 -12 src/sys/security/mac_lomac/mac_lomac.c
1.84 +8 -12 src/sys/security/mac_mls/mac_mls.c
1.64 +5 -7 src/sys/security/mac_stub/mac_stub.c
1.74 +9 -30 src/sys/security/mac_test/mac_test.c
1.226 +1 -2 src/sys/sys/mount.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200704221618.l3MGIARB059030>