freebsd-skq/sys/security
Robert Watson 793274cecf Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba
MAC policy.  To load a KLD, require that the subject hold Biba privilege,
and the the kernel module be marked as high integrity.  To unload a
KLD, require that the subject hold Biba privilege.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-02-04 22:38:33 +00:00
..
mac Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. 2003-01-21 08:56:16 +00:00
mac_biba Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba 2003-02-04 22:38:33 +00:00
mac_bsdextended Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. 2003-01-21 08:56:16 +00:00
mac_ifoff
mac_lomac Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. 2003-01-21 08:56:16 +00:00
mac_mls Place more stringent checks on process credential relabeling for the Biba 2003-02-04 21:28:46 +00:00
mac_none
mac_partition
mac_seeotheruids
mac_stub
mac_test