freebsd-dev/sys/security
Robert Watson 793274cecf Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba
MAC policy.  To load a KLD, require that the subject hold Biba privilege,
and the the kernel module be marked as high integrity.  To unload a
KLD, require that the subject hold Biba privilege.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-02-04 22:38:33 +00:00
..
mac Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. 2003-01-21 08:56:16 +00:00
mac_biba Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba 2003-02-04 22:38:33 +00:00
mac_bsdextended Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. 2003-01-21 08:56:16 +00:00
mac_ifoff License and wording updates: NAI has authorized the removal of clause 2002-11-04 01:53:12 +00:00
mac_lomac Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. 2003-01-21 08:56:16 +00:00
mac_mls Place more stringent checks on process credential relabeling for the Biba 2003-02-04 21:28:46 +00:00
mac_none Default policies to on: if you load them or compile them into your 2002-12-10 16:20:34 +00:00
mac_partition Update MAC modules for changes in arguments for exec MAC policy 2002-11-08 18:04:36 +00:00
mac_seeotheruids Default policies to on: if you load them or compile them into your 2002-12-10 16:20:34 +00:00
mac_stub Default policies to on: if you load them or compile them into your 2002-12-10 16:20:34 +00:00
mac_test Default policies to on: if you load them or compile them into your 2002-12-10 16:20:34 +00:00