d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
fc9d8f0057
freebsd-dev/sys/security
History
Christian S.J. Peron c52a508838 Make sure that the termid type is initialized to AU_IPv4 by default. 
This makes sure that process tokens credentials with un-initialized
audit contexts are handled correctly.  Currently, when invariants are
enabled, this change fixes a panic by ensuring that we have a valid
termid family.  Also, this fixes token generation for process tokens
making sure that userspace is always getting a valid token.

This is consistent with what Solaris does when an audit context is
un-initialized.

Obtained from:	TrustedBSD Project
MFC after:	1 week
2008-01-28 17:33:46 +00:00
..
audit Make sure that the termid type is initialized to AU_IPv4 by default. 2008-01-28 17:33:46 +00:00
mac VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in 2008-01-13 14:44:15 +00:00
mac_biba Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_bsdextended Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_ifoff Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_lomac Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_mls Properly return the error from mls_subject_privileged() in the ifnet 2008-01-28 10:20:18 +00:00
mac_none Consistently name functions for mac_<policy> as <policy>_whatever rather 2007-10-25 11:31:11 +00:00
mac_partition Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_portacl Consistently name functions for mac_<policy> as <policy>_whatever rather 2007-10-25 11:31:11 +00:00
mac_seeotheruids Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_stub Add a new file descriptor type for IPC shared memory objects and use it to 2008-01-08 21:58:16 +00:00
mac_test Add a new file descriptor type for IPC shared memory objects and use it to 2008-01-08 21:58:16 +00:00