From owner-cvs-all Tue Nov 19 14:15:43 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5496C37B401; Tue, 19 Nov 2002 14:15:42 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1758043E3B; Tue, 19 Nov 2002 14:15:42 -0800 (PST) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id gAJMCgmV014459; Tue, 19 Nov 2002 14:12:42 -0800 (PST) (envelope-from rwatson@repoman.freebsd.org) Received: (from rwatson@localhost) by repoman.freebsd.org (8.12.6/8.12.6/Submit) id gAJMCgE3014458; Tue, 19 Nov 2002 14:12:42 -0800 (PST) Message-Id: <200211192212.gAJMCgE3014458@repoman.freebsd.org> From: Robert Watson Date: Tue, 19 Nov 2002 14:12:42 -0800 (PST) To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_linker.c kern_mac.c link_elf.c src/sys/sys mac.h mac_policy.h X-FreeBSD-CVS-Branch: HEAD Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG rwatson 2002/11/19 14:12:42 PST Modified files: sys/kern kern_linker.c kern_mac.c link_elf.c sys/sys mac.h mac_policy.h Log: Merge kld access control checks from the MAC tree: these access control checks permit policy modules to augment the system policy for permitting kld operations. This permits policies to limit access to kld operations based on credential (and other) properties, as well as to perform checks on the kld being loaded (integrity, etc). Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Revision Changes Path 1.97 +42 -0 src/sys/kern/kern_linker.c 1.68 +46 -0 src/sys/kern/kern_mac.c 1.68 +9 -0 src/sys/kern/link_elf.c 1.31 +3 -0 src/sys/sys/mac.h 1.32 +4 -0 src/sys/sys/mac_policy.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message