d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5136300015
freebsd-dev/sys
History
Robert Watson 5136300015 Provide a simple sample labeled access control policy, mac_partition. 
This policy can be loaded dynamically, and assigns each process a
partition number, as well as permitting processes to operate outside
the partition.  Processes contained in a partition can only "see"
processes inside the same partition, so it's a little like jail.
The partition of a user can be set using the label mechanisms in
login.conf.  This sample policy is a good starting point for developers
wanting to learn about how to produce labeled policies, as it labels
only one kernel object, the process credential.

PR:
Submitted by:
Reviewed by:
Approved by:
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-23 23:36:26 +00:00
..
alpha psl.h isn't referenced anywhere that I could find on the alpha, so remove 2002-10-21 21:08:32 +00:00
amd64 No need for pmtimer hint anymore. 2002-10-22 17:32:27 +00:00
arm Add standards visibility conditionals. Change any uses of sigset_t to 2002-10-13 00:31:46 +00:00
boot Pass the right number of tlb slots to the kernel. The allocation scheme 2002-10-18 23:49:18 +00:00
cam * Add CDRIOC{READ,WRITE}SPEED ioctls to cd(4). Units are in KB/sec. 2002-10-18 22:03:39 +00:00
coda Back our kernel support for reliable signal queues. 2002-10-01 17:15:53 +00:00
compat Remove the process state PRS_WAIT. 2002-10-21 22:27:36 +00:00
conf - New-bussify the rc(4) device driver. 2002-10-23 15:53:09 +00:00
contrib Replace aux mbufs with packet tags: 2002-10-16 01:54:46 +00:00
crypto Don't panic when we can just return an error code. 2002-10-14 11:21:05 +00:00
ddb Remove the process state PRS_WAIT. 2002-10-21 22:27:36 +00:00
dev - New-bussify the rc(4) device driver. 2002-10-23 15:53:09 +00:00
fs This checkin reimplements the io-request priority hack in a way 2002-10-22 00:59:49 +00:00
geom No need to specify CTLTYPE_INT when we use SYSCTL_INT. 2002-10-20 22:46:50 +00:00
gnu MFufs 1.33: 2002-10-18 21:41:41 +00:00
i4b Don't include the depricated "bpf.h" and always compile in bpf support 2002-10-21 05:05:43 +00:00
i386 - New-bussify the rc(4) device driver. 2002-10-23 15:53:09 +00:00
ia64 In cb_dumphdr() we were calling buf_write() with di->priv as the 2002-10-20 23:39:43 +00:00
isa Fix compile with options SC_NO_SUSPEND_VTYSWITCH. 2002-10-17 16:09:13 +00:00
isofs/cd9660 Fix comments and one resulting code confusion about the type of the 2002-10-16 08:04:11 +00:00
kern Whitespace cleanup. 2002-10-23 10:26:54 +00:00
libkern Slight overhaul of arc4random() and friends. 2002-10-11 13:13:08 +00:00
modules Provide a simple sample labeled access control policy, mac_partition. 2002-10-23 23:36:26 +00:00
net Don't send/recieve packets when the interface is down. 2002-10-23 15:16:37 +00:00
netatalk Add more ethernet types and move AppleTalk types into proper location. 2002-09-06 17:02:29 +00:00
netatm Add a field to struct cmn_unit to hold a pointer to the driver's softc. 2002-10-01 22:04:31 +00:00
netgraph Use if_printf(ifp, "blah") instead of 2002-10-21 02:51:56 +00:00
netinet Kill EOL spaces. 2002-10-23 10:07:55 +00:00
netinet6 last arg of in6?_gif_output() is not used any more. 2002-10-17 17:47:55 +00:00
netipsec "Fast IPsec": this is an experimental IPsec implementation that is derived 2002-10-16 02:10:08 +00:00
netipx Replace aux mbufs with packet tags: 2002-10-16 01:54:46 +00:00
netkey - fixed the order of searching SA table for packets. 2002-07-10 16:39:38 +00:00
netnatm Be consistent about functions being static. 2002-10-16 09:19:17 +00:00
netncp Change iov_base's type from char *' to the standard void *'. All 2002-10-11 14:58:34 +00:00
netns Use m_length() instead of home-rolled versions. 2002-09-18 19:44:14 +00:00
netsmb Some kernel threads try to do significant work, and the default KSTACK_PAGES 2002-10-02 07:44:29 +00:00
nfs Change iov_base's type from char *' to the standard void *'. All 2002-10-11 14:58:34 +00:00
nfsclient Don't examine an un-initialized variable. 2002-10-20 21:52:05 +00:00
nfsserver Set the NOMACCHECK flag for namei()'s generated by the NFS server code. 2002-10-19 21:27:40 +00:00
opencrypto Module-ize the 'core' crypto stuff. This may still need to be compiled 2002-10-16 14:31:34 +00:00
pc98 MFi386: revision 1.10 2002-10-23 12:54:05 +00:00
pccard MFp4: Comment about not assuming INTA# for 6729 2002-10-07 07:02:48 +00:00
pci Add some magic bits necessary to turn the transmitter on for some 2002-10-22 02:33:50 +00:00
posix4 Tidy up the scheduler's code for changing the priority of a thread. 2002-10-14 20:34:31 +00:00
powerpc Add the USER_SR segment register to pcb state. Initialize correctly, 2002-10-21 05:27:41 +00:00
rpc
security Style fix: space between 'switch' and '('. 2002-10-22 19:01:49 +00:00
sparc64 We always need sys/pcpu.h now, not just for the SMP case. 2002-10-23 20:18:33 +00:00
sys Only define SEEK_{SET,CUR,END} if not already defined (by <stdio.h>) 2002-10-23 12:13:10 +00:00
tools - Move ASSERT_VOP_*LOCK* functionality into functions in vfs_subr.c 2002-09-26 04:48:44 +00:00
ufs We must be careful to avoid recursive copy-on-write faults when 2002-10-23 21:47:02 +00:00
vm Invoke mac_check_vnode_mmap() during mmap operations on vnodes, 2002-10-22 15:56:44 +00:00
Makefile