freebsd-nq/sys/security
Robert Watson eb542415c0 In the MAC Framework implementation, file systems have two per-mountpoint
labels: the mount label (label of the mountpoint) and the fs label (label
of the file system).  In practice, policies appear to only ever use one,
and the distinction is not helpful.

Combine mnt_mntlabel and mnt_fslabel into a single mnt_label, and
eliminate extra machinery required to maintain the additional label.
Update policies to reflect removal of extra entry points and label.

Obtained from:	TrustedBSD Project
Sponsored by:	SPARTA, Inc.
2007-04-22 16:18:10 +00:00
..
audit Allow MAC policy modules to control access to audit configuration system 2007-04-21 22:08:48 +00:00
mac In the MAC Framework implementation, file systems have two per-mountpoint 2007-04-22 16:18:10 +00:00
mac_biba In the MAC Framework implementation, file systems have two per-mountpoint 2007-04-22 16:18:10 +00:00
mac_bsdextended Allow MAC policy modules to control access to audit configuration system 2007-04-21 22:08:48 +00:00
mac_ifoff More unnecessary include reduction. 2007-02-23 14:39:04 +00:00
mac_lomac In the MAC Framework implementation, file systems have two per-mountpoint 2007-04-22 16:18:10 +00:00
mac_mls In the MAC Framework implementation, file systems have two per-mountpoint 2007-04-22 16:18:10 +00:00
mac_none Remove many unneeded includes, update copyright. 2007-02-23 11:21:26 +00:00
mac_partition More unnecessary include reduction. 2007-02-23 14:39:04 +00:00
mac_portacl More unnecessary include reduction. 2007-02-23 14:39:04 +00:00
mac_seeotheruids More unnecessary include reduction. 2007-02-23 14:39:04 +00:00
mac_stub In the MAC Framework implementation, file systems have two per-mountpoint 2007-04-22 16:18:10 +00:00
mac_test In the MAC Framework implementation, file systems have two per-mountpoint 2007-04-22 16:18:10 +00:00