Robert Watson db2661ce96 Import an implementation of LOMAC (Low-Watermark Mandatory Access ... Control) as a MAC Framework policy module. Unlike the existing src/sys/security/lomac implementation, this one has its fingers out of the kernel lock order and doesn't make use of flags in existing kernel structures. This greatly reduces the quantity of replicated code with src/sys/kern, simplifies the implementation (3000 vs 8500 lines), and correctes a number of known stability problems with the existing LOMAC implementation, which will be removed. A bit more hooking up to do here. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2002-11-26 17:26:06 +00:00
..
lomac	Regularize the vop_stdlock'ing protocol across all the filesystems	2002-10-14 03:20:36 +00:00
mac	Un-staticize mac_cred_mmapped_drop_perms() so that it may be used	2002-11-26 17:11:57 +00:00
mac_biba	Garbage collect mac_create_devfs_vnode() -- it hasn't been used since	2002-11-12 04:20:36 +00:00
mac_bsdextended	Update MAC modules for changes in arguments for exec MAC policy	2002-11-08 18:04:36 +00:00
mac_ifoff	License and wording updates: NAI has authorized the removal of clause	2002-11-04 01:53:12 +00:00
mac_lomac	Import an implementation of LOMAC (Low-Watermark Mandatory Access	2002-11-26 17:26:06 +00:00
mac_mls	Garbage collect mac_create_devfs_vnode() -- it hasn't been used since	2002-11-12 04:20:36 +00:00
mac_none	Garbage collect mac_create_devfs_vnode() -- it hasn't been used since	2002-11-12 04:20:36 +00:00
mac_partition	Update MAC modules for changes in arguments for exec MAC policy	2002-11-08 18:04:36 +00:00
mac_seeotheruids	License and wording updates: NAI has authorized the removal of clause	2002-11-04 01:53:12 +00:00
mac_stub	Garbage collect mac_create_devfs_vnode() -- it hasn't been used since	2002-11-12 04:20:36 +00:00
mac_test	Garbage collect mac_create_devfs_vnode() -- it hasn't been used since	2002-11-12 04:20:36 +00:00