Robert Watson 84c7715ec3 Implement Biba policy entry points for mac_check_system_swapon() ...

and mac_check_system_sysctl(), providing additional integrity
protections relating to swap target device selection and system
management via sysctl().  Require Biba privilege for both; also
require that the target of swap operations be a high integrity
object, since swap data is high integrity.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Asssociates Laboratories

2002-10-29 19:18:52 +00:00

..

lomac

Regularize the vop_stdlock'ing protocol across all the filesystems

2002-10-14 03:20:36 +00:00

mac

Remove all reference to 'struct oldmac', since it's no longer required

2002-10-28 19:44:05 +00:00

mac_biba

Implement Biba policy entry points for mac_check_system_swapon()

2002-10-29 19:18:52 +00:00

mac_bsdextended

Merge implementation of mpo_check_vnode_link() for various appropriate

2002-10-05 18:25:48 +00:00

mac_ifoff

Rename mac_check_socket_receive() to mac_check_socket_deliver() so that

2002-08-15 18:51:27 +00:00

mac_mls

Correct a typo in a previously commented include entry that was made

2002-10-28 19:50:06 +00:00

mac_none

Slightly change the semantics of vnode labels for MAC: rather than

2002-10-26 14:38:24 +00:00

mac_partition

Provide a simple sample labeled access control policy, mac_partition.

2002-10-23 23:36:27 +00:00

mac_seeotheruids

Introduce support for Mandatory Access Control and extensible

2002-07-31 18:07:45 +00:00

mac_stub

Slightly change the semantics of vnode labels for MAC: rather than

2002-10-26 14:38:24 +00:00

mac_test

Slightly change the semantics of vnode labels for MAC: rather than

2002-10-26 14:38:24 +00:00