freebsd-nq/sys
Robert Watson 7587203c2f Hook up most of the MAC entry points relating to file/directory/node
creation, deletion, and rename.  There are one or two other stray
cases I'll catch in follow-up commits (such as unix domain socket
creation); this permits MAC policy modules to limit the ability to
perform these operations based on existing UNIX credential / vnode
attributes, extended attributes, and security labels.  In the rename
case using MAC, we now have to lock the from directory and file
vnodes for the MAC check, but this is done only in the MAC case,
and the locks are immediately released so that the remainder of the
rename implementation remains the same.  Because the create check
takes a vattr to know object type information, we now initialize
additional fields in the VATTR passed to VOP_SYMLINK() in the MAC
case.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-19 20:25:57 +00:00
..
alpha Add two hooks to signal module load and module unload to MD code. 2002-10-19 19:16:03 +00:00
amd64 Add two hooks to signal module load and module unload to MD code. 2002-10-19 19:16:03 +00:00
arm Add standards visibility conditionals. Change any uses of sigset_t to 2002-10-13 00:31:46 +00:00
boot Pass the right number of tlb slots to the kernel. The allocation scheme 2002-10-18 23:49:18 +00:00
cam * Add CDRIOC{READ,WRITE}SPEED ioctls to cd(4). Units are in KB/sec. 2002-10-18 22:03:39 +00:00
coda Back our kernel support for reliable signal queues. 2002-10-01 17:15:53 +00:00
compat Replace the conventional usage of strncpy() by using strlcpy(). 2002-10-17 22:27:21 +00:00
conf Remove the _ia64_unwind_start and _ia64_unwind_end symbols. We now 2002-10-19 19:32:21 +00:00
contrib Replace aux mbufs with packet tags: 2002-10-16 01:54:46 +00:00
crypto Don't panic when we can just return an error code. 2002-10-14 11:21:05 +00:00
ddb Round out the facilty for a 'bound' thread to loan out its KSE 2002-10-09 02:33:36 +00:00
dev * Add CDRIOC{READ,WRITE}SPEED ioctls to cd(4). Units are in KB/sec. 2002-10-18 22:03:39 +00:00
fs Fix comments and one resulting code confusion about the type of the 2002-10-16 08:04:11 +00:00
geom Fix a missing initialization. 2002-10-19 17:19:41 +00:00
gnu MFufs 1.33: 2002-10-18 21:41:41 +00:00
i4b Be consistent about marking functions static. 2002-10-15 20:32:45 +00:00
i386 Add two hooks to signal module load and module unload to MD code. 2002-10-19 19:16:03 +00:00
ia64 Update the unwind information when modules are loaded and unloaded 2002-10-19 19:30:38 +00:00
isa Fix compile with options SC_NO_SUSPEND_VTYSWITCH. 2002-10-17 16:09:13 +00:00
isofs/cd9660 Fix comments and one resulting code confusion about the type of the 2002-10-16 08:04:11 +00:00
kern Hook up most of the MAC entry points relating to file/directory/node 2002-10-19 20:25:57 +00:00
libkern Slight overhaul of arc4random() and friends. 2002-10-11 13:13:08 +00:00
modules (1) added LSI Logic copyright, and legal line 3 in license, and string 2002-10-18 21:29:14 +00:00
net last arg of in6?_gif_output() is not used any more. 2002-10-17 17:47:55 +00:00
netatalk Add more ethernet types and move AppleTalk types into proper location. 2002-09-06 17:02:29 +00:00
netatm Add a field to struct cmn_unit to hold a pointer to the driver's softc. 2002-10-01 22:04:31 +00:00
netgraph use __packed. 2002-09-23 18:54:32 +00:00
netinet Several malloc() calls were passing the M_DONTWAIT flag 2002-10-19 11:31:50 +00:00
netinet6 last arg of in6?_gif_output() is not used any more. 2002-10-17 17:47:55 +00:00
netipsec "Fast IPsec": this is an experimental IPsec implementation that is derived 2002-10-16 02:10:08 +00:00
netipx Replace aux mbufs with packet tags: 2002-10-16 01:54:46 +00:00
netkey - fixed the order of searching SA table for packets. 2002-07-10 16:39:38 +00:00
netnatm Be consistent about functions being static. 2002-10-16 09:19:17 +00:00
netncp Change iov_base's type from char *' to the standard void *'. All 2002-10-11 14:58:34 +00:00
netns Use m_length() instead of home-rolled versions. 2002-09-18 19:44:14 +00:00
netsmb Some kernel threads try to do significant work, and the default KSTACK_PAGES 2002-10-02 07:44:29 +00:00
nfs Change iov_base's type from char *' to the standard void *'. All 2002-10-11 14:58:34 +00:00
nfsclient Regularize the vop_stdlock'ing protocol across all the filesystems 2002-10-14 03:20:36 +00:00
nfsserver Correct a problem wherein NFS servers running NFSv2 would not return 2002-10-03 21:50:37 +00:00
opencrypto Module-ize the 'core' crypto stuff. This may still need to be compiled 2002-10-16 14:31:34 +00:00
pc98 Permits UFS ACLs to be used with the GENERIC kernel. Due to recent 2002-10-19 16:54:15 +00:00
pccard MFp4: Comment about not assuming INTA# for 6729 2002-10-07 07:02:48 +00:00
pci Be consistent about functions being static. 2002-10-16 09:14:59 +00:00
posix4 Tidy up the scheduler's code for changing the priority of a thread. 2002-10-14 20:34:31 +00:00
powerpc Add two hooks to signal module load and module unload to MD code. 2002-10-19 19:16:03 +00:00
rpc
security Regularize the vop_stdlock'ing protocol across all the filesystems 2002-10-14 03:20:36 +00:00
sparc64 Add two hooks to signal module load and module unload to MD code. 2002-10-19 19:16:03 +00:00
sys Add two hooks to signal module load and module unload to MD code. 2002-10-19 19:16:03 +00:00
tools - Move ASSERT_VOP_*LOCK* functionality into functions in vfs_subr.c 2002-09-26 04:48:44 +00:00
ufs Clarify that the UFS1 extended attribute configuration steps do not apply 2002-10-19 16:09:16 +00:00
vm Complete the page queues locking needed for the page-based copy- 2002-10-19 18:34:39 +00:00
Makefile