freebsd-skq/sys/security
Alan Cox 1361cdc644 Make preparations for resurrecting shared/read locks on vm maps:
mac_proc_vm_revoke_recurse() requests a read lock on the vm map at the start
but does not handle failure by vm_map_lock_upgrade() when it seeks to modify
the vm map.  At present, this works because all lock request on a vm map are
implemented as exclusive locks.  Thus, vm_map_lock_upgrade() is a no-op that
always reports success.  However, that is about to change, and
proc_vm_revoke_recurse() will require substantial modifications to handle
vm_map_lock_upgrade() failures.  For the time being, I am changing
mac_proc_vm_revoke_recurse() to request a write lock on the vm map at the
start.

Approved by:	rwatson
MFC after:	3 months
2008-12-22 17:32:52 +00:00
..
audit Merge OpenBSM 1.1 alpha 2 from the OpenBSM vendor branch to head, both 2008-12-02 23:26:43 +00:00
mac Make preparations for resurrecting shared/read locks on vm maps: 2008-12-22 17:32:52 +00:00
mac_biba Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
mac_bsdextended MFp4: 2008-11-29 14:32:14 +00:00
mac_ifoff Introduce two related changes to the TrustedBSD MAC Framework: 2008-08-23 15:26:36 +00:00
mac_lomac Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
mac_mls Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
mac_none Introduce two related changes to the TrustedBSD MAC Framework: 2008-08-23 15:26:36 +00:00
mac_partition Rename three MAC entry points from _proc_ to _cred_ to reflect the fact 2008-10-28 11:33:06 +00:00
mac_portacl Introduce two related changes to the TrustedBSD MAC Framework: 2008-08-23 15:26:36 +00:00
mac_seeotheruids Add a mac_inpcb_check_visible implementation to all MAC policies 2008-10-17 15:11:12 +00:00
mac_stub Commit part of accmode_t changes that I missed in previous commit. 2008-10-28 21:57:32 +00:00
mac_test Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00