36b0360b37
kernel access control. Instrument the code managing IP fragment reassembly queues (struct ipq) to invoke appropriate MAC entry points to maintain a MAC label on each queue. Permit MAC policies to associate information with a queue based on the mbuf that caused it to be created, update that information based on further mbufs accepted by the queue, influence the decision making process by which mbufs are accepted to the queue, and set the label of the mbuf holding the reassembled datagram following reassembly completetion. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs |
||
|---|---|---|
| .. | ||
| alpha | ||
| amd64 | ||
| arm | ||
| boot | ||
| cam | ||
| coda | ||
| compat | ||
| conf | ||
| contrib | ||
| crypto | ||
| ddb | ||
| dev | ||
| fs | ||
| geom | ||
| gnu | ||
| i4b | ||
| i386 | ||
| ia64 | ||
| isa | ||
| isofs/cd9660 | ||
| kern | ||
| libkern | ||
| modules | ||
| net | ||
| netatalk | ||
| netatm | ||
| netgraph | ||
| netinet | ||
| netinet6 | ||
| netipx | ||
| netkey | ||
| netnatm | ||
| netncp | ||
| netns | ||
| netsmb | ||
| nfs | ||
| nfsclient | ||
| nfsserver | ||
| pc98 | ||
| pccard | ||
| pci | ||
| posix4 | ||
| powerpc | ||
| rpc | ||
| security | ||
| sparc64 | ||
| sys | ||
| tools | ||
| ufs | ||
| vm | ||
| Makefile | ||