Date: Wed, 4 May 2005 10:39:15 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/conf files src/sys/kern uipc_sem.c src/sys/modules/sem Makefile src/sys/posix4 ksem.h src/sys/sys mac.h mac_policy.h src/sys/security/mac mac_posix_sem.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_mls ... Message-ID: <200505041039.j44AdFHO036001@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2005-05-04 10:39:15 UTC
FreeBSD src repository
Modified files:
sys/conf files
sys/kern uipc_sem.c
sys/modules/sem Makefile
sys/posix4 ksem.h
sys/sys mac.h mac_policy.h
sys/security/mac_biba mac_biba.c
sys/security/mac_mls mac_mls.c
sys/security/mac_stub mac_stub.c
sys/security/mac_test mac_test.c
Added files:
sys/security/mac mac_posix_sem.c
Log:
Introduce MAC Framework and MAC Policy entry points to label and control
access to POSIX Semaphores:
mac_init_posix_sem() Initialize label for POSIX semaphore
mac_create_posix_sem() Create POSIX semaphore
mac_destroy_posix_sem() Destroy POSIX semaphore
mac_check_posix_sem_destroy() Check whether semaphore may be destroyed
mac_check_posix_sem_getvalue() Check whether semaphore may be queried
mac_check_possix_sem_open() Check whether semaphore may be opened
mac_check_posix_sem_post() Check whether semaphore may be posted to
mac_check_posix_sem_unlink() Check whether semaphore may be unlinked
mac_check_posix_sem_wait() Check whether may wait on semaphore
Update Biba, MLS, Stub, and Test policies to implement these entry points.
For information flow policies, most semaphore operations are effectively
read/write.
Submitted by: Dandekar Hrishikesh <rishi_dandekar at sbcglobal dot net>
Sponsored by: DARPA, McAfee, SPARTA
Obtained from: TrustedBSD Project
Revision Changes Path
1.1020 +1 -0 src/sys/conf/files
1.19 +56 -9 src/sys/kern/uipc_sem.c
1.2 +1 -1 src/sys/modules/sem/Makefile
1.2 +4 -0 src/sys/posix4/ksem.h
1.1 +181 -0 src/sys/security/mac/mac_posix_sem.c (new)
1.85 +59 -0 src/sys/security/mac_biba/mac_biba.c
1.70 +59 -0 src/sys/security/mac_mls/mac_mls.c
1.49 +66 -0 src/sys/security/mac_stub/mac_stub.c
1.58 +61 -0 src/sys/security/mac_test/mac_test.c
1.64 +15 -0 src/sys/sys/mac.h
1.63 +21 -0 src/sys/sys/mac_policy.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200505041039.j44AdFHO036001>