rwatson 22a1b720c1 Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba ...

MAC policy.  To load a KLD, require that the subject hold Biba privilege,
and the the kernel module be marked as high integrity.  To unload a
KLD, require that the subject hold Biba privilege.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

2003-02-04 22:38:33 +00:00

..

mac

Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.

2003-01-21 08:56:16 +00:00

mac_biba

Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba

2003-02-04 22:38:33 +00:00

mac_bsdextended

Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.

2003-01-21 08:56:16 +00:00

mac_ifoff

License and wording updates: NAI has authorized the removal of clause

2002-11-04 01:53:12 +00:00

mac_lomac

Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.

2003-01-21 08:56:16 +00:00

mac_mls

Place more stringent checks on process credential relabeling for the Biba

2003-02-04 21:28:46 +00:00

mac_none

Default policies to on: if you load them or compile them into your

2002-12-10 16:20:34 +00:00

mac_partition

Update MAC modules for changes in arguments for exec MAC policy

2002-11-08 18:04:36 +00:00

mac_seeotheruids

Default policies to on: if you load them or compile them into your

2002-12-10 16:20:34 +00:00

mac_stub

Default policies to on: if you load them or compile them into your

2002-12-10 16:20:34 +00:00

mac_test

Default policies to on: if you load them or compile them into your

2002-12-10 16:20:34 +00:00