Date: Sun, 2 May 2004 13:17:42 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 52095 for review Message-ID: <200405022017.i42KHgde064313@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=52095 Change 52095 by rwatson@rwatson_paprika on 2004/05/02 13:17:19 Add some tasks. Affected files ... .. //depot/projects/trustedbsd/mac/TODO#2 edit Differences ... ==== //depot/projects/trustedbsd/mac/TODO#2 (text+ko) ==== @@ -1,3 +1,27 @@ -Date Added Task Description ----------- ---- ----------- +Date Task Description +-------- ---- ----------- +20040502 P_SUGID.optional Currently, policies can cause the + setting of P_SUGID on processes when + they manipulate the credential. + However, this may be inappropriate + for policies that track information + flow control in an advisory form. + The MAC Framework should make the + decision to set P_SUGID explicit + rather than implicit. + +20040502 netinet6.support Currently, TCP/IP with IPv4 is + fully supported; however, IPv6 is + not as a number of components do + not properly propagate labels across + mbuf alloc/copy operations, proper + checks may not occur in socket + delivery, etc. + +20040502 netatalk.support Currently, netatalk is poorly + supported under MAC, as most I/O + operations are performed using + socket labels rather than DDP + PCBs as found in IPv4. +
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200405022017.i42KHgde064313>