From owner-p4-projects@FreeBSD.ORG  Tue Jun 28 12:50:38 2005
Return-Path: <owner-p4-projects@FreeBSD.ORG>
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 6F8A316A420; Tue, 28 Jun 2005 12:50:38 +0000 (GMT)
X-Original-To: perforce@FreeBSD.org
Delivered-To: perforce@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 25B5616A41C
	for <perforce@FreeBSD.org>; Tue, 28 Jun 2005 12:50:38 +0000 (GMT)
	(envelope-from samy@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1362F43D1D
	for <perforce@FreeBSD.org>; Tue, 28 Jun 2005 12:50:38 +0000 (GMT)
	(envelope-from samy@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j5SCobtX068679
	for <perforce@FreeBSD.org>; Tue, 28 Jun 2005 12:50:37 GMT
	(envelope-from samy@FreeBSD.org)
Received: (from perforce@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j5SCobA8068676
	for perforce@freebsd.org; Tue, 28 Jun 2005 12:50:37 GMT
	(envelope-from samy@FreeBSD.org)
Date: Tue, 28 Jun 2005 12:50:37 GMT
Message-Id: <200506281250.j5SCobA8068676@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
	samy@FreeBSD.org using -f
From: Samy Al Bahra <samy@FreeBSD.org>
To: Perforce Change Reviews <perforce@FreeBSD.org>
Cc: 
Subject: PERFORCE change 79076 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Jun 2005 12:50:39 -0000

http://perforce.freebsd.org/chv.cgi?CH=79076

Change 79076 by samy@samy_home on 2005/06/28 12:50:36

	The mac_suidacl policy takes advantage of the new
	setxid() MAC entry points (and check_vnode_exec) to
	control access of credential-changing elements of a
	system (at a uid and gid level). This is a trivial
	modification of the mac_portacl module.
	Approved by: rwatson

Affected files ...

.. //depot/projects/trustedbsd/mac/share/man/man4/Makefile#52 edit
.. //depot/projects/trustedbsd/mac/share/man/man4/mac_suidacl.4#1 add
.. //depot/projects/trustedbsd/mac/sys/conf/files#118 edit
.. //depot/projects/trustedbsd/mac/sys/modules/mac_suidacl/Makefile#1 add
.. //depot/projects/trustedbsd/mac/sys/security/mac_suidacl/mac_suidacl.c#1 add

Differences ...

==== //depot/projects/trustedbsd/mac/share/man/man4/Makefile#52 (text+ko) ====

@@ -142,6 +142,7 @@
 	mac_partition.4 \
 	mac_portacl.4 \
 	mac_seeotheruids.4 \
+	mac_suidacl.4 \
 	mac_support.4 \
 	mac_stub.4 \
 	mac_test.4 \

==== //depot/projects/trustedbsd/mac/sys/conf/files#118 (text+ko) ====

@@ -1767,6 +1767,7 @@
 security/mac_portacl/mac_portacl.c optional mac_portacl
 security/mac_seeotheruids/mac_seeotheruids.c optional mac_seeotheruids
 security/mac_stub/mac_stub.c	optional mac_stub
+security/mac_suidacl/mac_suidacl.c optional mac_suidacl
 security/mac_test/mac_test.c	optional mac_test
 ufs/ffs/ffs_alloc.c		optional ffs
 ufs/ffs/ffs_balloc.c		optional ffs