freebsd-nq/sys/nfsserver
Robert Watson c14d15ae3e Remove MAC Framework access control check entry points made redundant with
the introduction of priv(9) and MAC Framework entry points for privilege
checking/granting.  These entry points exactly aligned with privileges and
provided no additional security context:

- mac_check_sysarch_ioperm()
- mac_check_kld_unload()
- mac_check_settime()
- mac_check_system_nfsd()

Add mpo_priv_check() implementations to Biba and LOMAC policies, which,
for each privilege, determine if they can be granted to processes
considered unprivileged by those two policies.  These mostly, but not
entirely, align with the set of privileges granted in jails.

Obtained from:	TrustedBSD Project
2007-04-22 15:31:22 +00:00
..
nfs_serv.c Initialize vfslocked to 0 before nfsm_srvmtofh() so that the variable is 2007-03-26 15:14:58 +00:00
nfs_srvcache.c - Turn all explicit giant acquires into conditional VFS_LOCK_GIANTs. 2007-03-17 18:18:08 +00:00
nfs_srvsock.c In nfsrv_rcv(), don't reacquire the nfs server lock until after 2007-04-15 15:50:50 +00:00
nfs_srvsubs.c - Split out the part of SYSCALL_MODULE_HELPER() that builds a 'struct 2007-04-02 13:53:26 +00:00
nfs_syscalls.c Remove MAC Framework access control check entry points made redundant with 2007-04-22 15:31:22 +00:00
nfs.h - Turn all explicit giant acquires into conditional VFS_LOCK_GIANTs. 2007-03-17 18:18:08 +00:00
nfsm_subs.h - Turn all explicit giant acquires into conditional VFS_LOCK_GIANTs. 2007-03-17 18:18:08 +00:00
nfsrvcache.h Size the NFS server dupreq cache on the basis of nmbclusters. On servers 2006-06-23 00:42:26 +00:00
nfsrvstats.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00