From owner-cvs-src@FreeBSD.ORG  Thu Jul 31 13:00:07 2003
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 27D2A37B407; Thu, 31 Jul 2003 13:00:07 -0700 (PDT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id B253443F85; Thu, 31 Jul 2003 13:00:06 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h6VK060U001165;
	Thu, 31 Jul 2003 13:00:06 -0700 (PDT)
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h6VK061P001164;
	Thu, 31 Jul 2003 13:00:06 -0700 (PDT)
Message-Id: <200307312000.h6VK061P001164@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 31 Jul 2003 13:00:06 -0700 (PDT)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/security/mac_mls mac_mls.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Jul 2003 20:00:07 -0000

rwatson     2003/07/31 13:00:06 PDT

  FreeBSD src repository

  Modified files:
    sys/security/mac_mls mac_mls.c 
  Log:
  Improve consistency with the Biba policy -- rename
  mac_mls_subject_equal_ok() to mac_mls_subject_privileged(),
  which more consistently reflects the fact that this is really
  about our notion of privilege in the MLS policy.
  
  Since we don't use suser() for privilege in MLS, remove
  the suser check from the ifnet relabel ioctl, and replace it
  with an MLS privilege check.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, Network Associates Laboratories
  
  Revision  Changes    Path
  1.51      +10 -23    src/sys/security/mac_mls/mac_mls.c