d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ac9dfc9061
freebsd-dev/sys/conf
History
Robert Watson 5264841183 Introduce MAC Framework and MAC Policy entry points to label and control 
access to POSIX Semaphores:

mac_init_posix_sem()            Initialize label for POSIX semaphore
mac_create_posix_sem()          Create POSIX semaphore
mac_destroy_posix_sem()         Destroy POSIX semaphore
mac_check_posix_sem_destroy()   Check whether semaphore may be destroyed
mac_check_posix_sem_getvalue()  Check whether semaphore may be queried
mac_check_possix_sem_open()     Check whether semaphore may be opened
mac_check_posix_sem_post()      Check whether semaphore may be posted to
mac_check_posix_sem_unlink()    Check whether semaphore may be unlinked
mac_check_posix_sem_wait()      Check whether may wait on semaphore

Update Biba, MLS, Stub, and Test policies to implement these entry points.
For information flow policies, most semaphore operations are effectively
read/write.

Submitted by:	Dandekar Hrishikesh <rishi_dandekar at sbcglobal dot net>
Sponsored by:	DARPA, McAfee, SPARTA
Obtained from:	TrustedBSD Project
2005-05-04 10:39:15 +00:00
..
defines
files Introduce MAC Framework and MAC Policy entry points to label and control 2005-05-04 10:39:15 +00:00
files.alpha Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
files.amd64 Update the file.* entries for the new home of hwpmc 2005-04-29 02:40:16 +00:00
files.arm We have an asm version of bcmp(), so we could use it as well. 2005-04-12 22:46:09 +00:00
files.i386 Update the file.* entries for the new home of hwpmc 2005-04-29 02:40:16 +00:00
files.ia64 Sanity the RTC code: 2005-04-22 05:04:58 +00:00
files.pc98 Update the file.* entries for the new home of hwpmc 2005-04-29 02:40:16 +00:00
files.powerpc Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
files.sparc64 Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
kern.mk Since the question keeps coming up, explain why the -mno-sse etc switches 2005-03-31 22:53:58 +00:00
kern.post.mk Be resistant to DESTDIR being set to some unkosher value, e.g. "/". 2005-04-28 14:45:57 +00:00
kern.pre.mk Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
kmod_syms.awk
kmod.mk Revert a mistake borrowed from kern.post.mk that has just been fixed. 2005-04-22 17:39:58 +00:00
ldscript.alpha Have the linker provide the btext symbol when referenced. This is needed 2004-08-27 19:13:35 +00:00
ldscript.amd64 Provide the _start_ctors and _stop_ctors symbols. As on i386, the addresses 2004-05-29 01:09:00 +00:00
ldscript.arm Use the address provided in the conf file, instead of hardcode 0xc0000000. 2004-09-23 22:52:55 +00:00
ldscript.i386
ldscript.ia64 Have the linker provide btext. It's used for profiling. 2004-08-25 07:43:28 +00:00
ldscript.powerpc
ldscript.sparc64
Makefile.alpha Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.amd64 Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.arm Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.i386 Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.ia64 Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.pc98 Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.powerpc Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
Makefile.sparc64 Never hardcode /sys into these Makefiles. The proper way to spell it is $S. 2005-04-13 14:49:57 +00:00
makeLINT.mk
makeLINT.sed
newvers.sh If USER of HOSTNAME is set to an empty value, use the fallback value. 2005-01-15 13:25:41 +00:00
NOTES Patches from Ruslan Ermilov to address problems compiling LINT 2005-04-28 16:33:15 +00:00
options Patches from Ruslan Ermilov to address problems compiling LINT 2005-04-28 16:33:15 +00:00
options.alpha Update for the KDB framework. Sanitize the alpha console code now that 2004-07-10 22:29:41 +00:00
options.amd64 Implement an alternate method to stop CPUs when entering DDB. Normally we use 2005-04-30 20:01:00 +00:00
options.arm Add a new option, ARM_CACHE_LOCK_ENABLE (I forgot it in my last commit). 2005-02-26 22:41:07 +00:00
options.i386 Implement an alternate method to stop CPUs when entering DDB. Normally we use 2005-04-30 20:01:00 +00:00
options.ia64 Catch up with the drive-by renaming of IA32 to COMPAT_IA32. It must 2004-08-16 18:54:23 +00:00
options.pc98 MFi386: revision 1.220 (add KDB_STOP_NMI option). 2005-05-01 03:59:25 +00:00
options.powerpc Catch up with sparc64 OFWCONS_POLL_HZ change 2004-06-25 13:44:34 +00:00
options.sparc64 Better OFW console support on Sun Ultra2 machines. 2004-06-24 02:57:11 +00:00
systags.sh Remove advertising clause from University of California Regent's 2004-04-07 20:46:16 +00:00