freebsd-skq/sys/security/mac
Robert Watson 92dbb82a47 Add a new MAC entry point, mac_thread_userret(td), which permits policy
modules to perform MAC-related events when a thread returns to user
space.  This is required for policies that have floating process labels,
as it's not always possible to acquire the process lock at arbitrary
points in the stack during system call processing; process labels might
represent traditional authentication data, process history information,
or other data.

LOMAC will use this entry point to perform the process label update
prior to the thread returning to userspace, when plugged into the MAC
framework.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-02 02:42:38 +00:00
..
mac_framework.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_framework.h Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_internal.h Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_net.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_pipe.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_policy.h Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_process.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_syscalls.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_system.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00
mac_vfs.c Add a new MAC entry point, mac_thread_userret(td), which permits policy 2002-10-02 02:42:38 +00:00