Define two new superblock file system flags:
FS_ACLS Administrative enable/disable of extended ACL support FS_MULTILABEL Administrative flag to indicate to the MAC Framework that objects in the file system are individually labeled using extended attributes. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Reviewed by: (in principal) mckusick, phk
This commit is contained in:
parent
64c003ed94
commit
77cb21f957
@ -374,11 +374,21 @@ struct fs {
|
||||
* accesses. Kernels that do not support auxiliary indicies clear the
|
||||
* flag to indicate that the indicies need to be rebuilt (by fsck) before
|
||||
* they can be used.
|
||||
*
|
||||
* FS_ACLS indicates that ACLs are administratively enabled for the
|
||||
* file system, so they should be loaded from extended attributes,
|
||||
* observed for access control purposes, and be administered by object
|
||||
* owners. FS_MULTILABEL indicates that the TrustedBSD MAC Framework
|
||||
* should attempt to back MAC labels into extended attributes on the
|
||||
* file system rather than maintain a single mount label for all
|
||||
* objects.
|
||||
*/
|
||||
#define FS_UNCLEAN 0x01 /* filesystem not clean at mount */
|
||||
#define FS_DOSOFTDEP 0x02 /* filesystem using soft dependencies */
|
||||
#define FS_NEEDSFSCK 0x04 /* filesystem needs sync fsck before mount */
|
||||
#define FS_INDEXDIRS 0x08 /* kernel supports indexed directories */
|
||||
#define FS_ACLS 0x10 /* file system has ACLs enabled */
|
||||
#define FS_MULTILABEL 0x20 /* file system is MAC multi-label */
|
||||
|
||||
/*
|
||||
* Macros to access bits in the fs_active array.
|
||||
|
Loading…
Reference in New Issue
Block a user