freebsd-nq/sys/security
Robert Watson 84c7715ec3 Implement Biba policy entry points for mac_check_system_swapon()
and mac_check_system_sysctl(), providing additional integrity
protections relating to swap target device selection and system
management via sysctl().  Require Biba privilege for both; also
require that the target of swap operations be a high integrity
object, since swap data is high integrity.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Asssociates Laboratories
2002-10-29 19:18:52 +00:00
..
lomac Regularize the vop_stdlock'ing protocol across all the filesystems 2002-10-14 03:20:36 +00:00
mac Remove all reference to 'struct oldmac', since it's no longer required 2002-10-28 19:44:05 +00:00
mac_biba Implement Biba policy entry points for mac_check_system_swapon() 2002-10-29 19:18:52 +00:00
mac_bsdextended Merge implementation of mpo_check_vnode_link() for various appropriate 2002-10-05 18:25:48 +00:00
mac_ifoff Rename mac_check_socket_receive() to mac_check_socket_deliver() so that 2002-08-15 18:51:27 +00:00
mac_mls Correct a typo in a previously commented include entry that was made 2002-10-28 19:50:06 +00:00
mac_none Slightly change the semantics of vnode labels for MAC: rather than 2002-10-26 14:38:24 +00:00
mac_partition Provide a simple sample labeled access control policy, mac_partition. 2002-10-23 23:36:27 +00:00
mac_seeotheruids Introduce support for Mandatory Access Control and extensible 2002-07-31 18:07:45 +00:00
mac_stub Slightly change the semantics of vnode labels for MAC: rather than 2002-10-26 14:38:24 +00:00
mac_test Slightly change the semantics of vnode labels for MAC: rather than 2002-10-26 14:38:24 +00:00