Date: Mon, 24 Mar 2003 17:16:10 -0800 (PST) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/security/mac_mls mac_mls.c Message-ID: <200303250116.h2P1GAjE078680@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2003/03/24 17:16:10 PST
FreeBSD src repository
Modified files:
sys/security/mac_mls mac_mls.c
Log:
Expand scope of the MLS policy to include a new entry point available
for enforcement:
mac_mls_check_system_swapon() - Require that the subject and the
swapfile target vnode labels dominate one another. An additional
check is probably needed here to require that the swapfile target
has a label of mls/high to prevent information leakage through
swapfiles.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.42 +20 -0 src/sys/security/mac_mls/mac_mls.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200303250116.h2P1GAjE078680>