rwatson 4651fb3eba Support the new MAC user API in kernel: modify existing system calls ...

to use a modified notion of 'struct mac', and flesh out the new variation
system calls (almost identical to existing ones except that they permit
a pid to be specified for process label retrieval, and don't follow
symlinks).  This generalizes the label API so that the framework is
now almost entirely policy-agnostic.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

2002-10-22 14:29:47 +00:00

..

lomac

Regularize the vop_stdlock'ing protocol across all the filesystems

2002-10-14 03:20:36 +00:00

mac

Support the new MAC user API in kernel: modify existing system calls

2002-10-22 14:29:47 +00:00

mac_biba

Introduce mac_biba_copy() and mac_mls_copy(), which conditionally

2002-10-21 20:55:39 +00:00

mac_bsdextended

Merge implementation of mpo_check_vnode_link() for various appropriate

2002-10-05 18:25:48 +00:00

mac_ifoff

Rename mac_check_socket_receive() to mac_check_socket_deliver() so that

2002-08-15 18:51:27 +00:00

mac_mls

Introduce mac_biba_copy() and mac_mls_copy(), which conditionally

2002-10-21 20:55:39 +00:00

mac_none

mac_none is a stub policy without any functional implementation.

2002-10-21 23:16:23 +00:00

mac_seeotheruids

…

mac_stub

mac_none is a stub policy without any functional implementation.

2002-10-21 23:16:23 +00:00

mac_test

Sync from MAC tree: break out the single mmap entry point into

2002-10-06 02:46:26 +00:00