From owner-p4-projects@FreeBSD.ORG Sun May 2 13:17:43 2004 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 6B16A16A4D0; Sun, 2 May 2004 13:17:43 -0700 (PDT) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4698F16A4CE for ; Sun, 2 May 2004 13:17:43 -0700 (PDT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 30D0243D1F for ; Sun, 2 May 2004 13:17:43 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.10/8.12.10) with ESMTP id i42KHgGe064316 for ; Sun, 2 May 2004 13:17:42 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.12.10/8.12.10/Submit) id i42KHgde064313 for perforce@freebsd.org; Sun, 2 May 2004 13:17:42 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Date: Sun, 2 May 2004 13:17:42 -0700 (PDT) Message-Id: <200405022017.i42KHgde064313@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson To: Perforce Change Reviews Subject: PERFORCE change 52095 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 May 2004 20:17:43 -0000 http://perforce.freebsd.org/chv.cgi?CH=52095 Change 52095 by rwatson@rwatson_paprika on 2004/05/02 13:17:19 Add some tasks. Affected files ... .. //depot/projects/trustedbsd/mac/TODO#2 edit Differences ... ==== //depot/projects/trustedbsd/mac/TODO#2 (text+ko) ==== @@ -1,3 +1,27 @@ -Date Added Task Description ----------- ---- ----------- +Date Task Description +-------- ---- ----------- +20040502 P_SUGID.optional Currently, policies can cause the + setting of P_SUGID on processes when + they manipulate the credential. + However, this may be inappropriate + for policies that track information + flow control in an advisory form. + The MAC Framework should make the + decision to set P_SUGID explicit + rather than implicit. + +20040502 netinet6.support Currently, TCP/IP with IPv4 is + fully supported; however, IPv6 is + not as a number of components do + not properly propagate labels across + mbuf alloc/copy operations, proper + checks may not occur in socket + delivery, etc. + +20040502 netatalk.support Currently, netatalk is poorly + supported under MAC, as most I/O + operations are performed using + socket labels rather than DDP + PCBs as found in IPv4. +