csjp 8db1bd7411 Introduce a new sysctl variable: ... security.mac.biba.interfaces_equal If non-zero, all network interfaces be created with the label: biba/equal(equal-equal) This is useful where programs which initialize network interfaces do not have any labeling support. This includes dhclient and ppp. A long term solution is to add labeling support into dhclient(8) and ppp(8), and remove this variable. It should be noted that this behavior is different then setting the: security.mac.biba.trust_all_interfaces sysctl variable, as this will create interfaces with a biba/high label. Lower integrity processes are not able to write to the interface in this event. The security.mac.biba.interfaces_equal will override trust_all_interfaces. The security.mac.biba.interfaces_equal variable will be set to zero or disabled by default. MFC after: 2 weeks		2005-12-31 05:06:59 +00:00
..
mac	Lock object while we iterate through it's backing objects.	2005-10-09 02:37:27 +00:00
mac_biba	Introduce a new sysctl variable:	2005-12-31 05:06:59 +00:00
mac_bsdextended	If a "hole" opens up in the ruleset (i.e.: remove 5), do not return	2005-07-28 13:55:12 +00:00
mac_ifoff
mac_lomac	Normalize a significant number of kernel malloc type names:	2005-10-31 15:41:29 +00:00
mac_mls	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_none	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_partition	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_portacl	Normalize a significant number of kernel malloc type names:	2005-10-31 15:41:29 +00:00
mac_seeotheruids	Allow the root user to be aware of other credentials by virtue	2005-09-30 23:41:10 +00:00
mac_stub	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00
mac_test	Add #include <sys/sx.h>, devfs is going to require this shortly.	2005-09-19 18:52:51 +00:00