Date: Tue, 1 Oct 2002 19:42:38 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_mac.c subr_trap.c src/sys/sys mac.h mac_policy.h Message-ID: <200210020242.g922gcnv087496@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2002/10/01 19:42:38 PDT
Modified files:
sys/kern kern_mac.c subr_trap.c
sys/sys mac.h mac_policy.h
Log:
Add a new MAC entry point, mac_thread_userret(td), which permits policy
modules to perform MAC-related events when a thread returns to user
space. This is required for policies that have floating process labels,
as it's not always possible to acquire the process lock at arbitrary
points in the stack during system call processing; process labels might
represent traditional authentication data, process history information,
or other data.
LOMAC will use this entry point to perform the process label update
prior to the thread returning to userspace, when plugged into the MAC
framework.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.27 +11 -0 src/sys/kern/kern_mac.c
1.231 +6 -0 src/sys/kern/subr_trap.c
1.9 +2 -0 src/sys/sys/mac.h
1.10 +2 -0 src/sys/sys/mac_policy.h
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210020242.g922gcnv087496>