rwatson 8fb47d67d7 Externalize local stack copy of the ifnet label, rather than the copy on ...

the ifnet itself.  The stack copy has been made while holding the mutex
protecting ifnet labels, so copying from the ifnet copy could result in
an inconsistent version being copied out.

Reported by:	Todd.Miller@sparta.com
Obtained from:	TrustedBSD Project
MFC after:	3 weeks

2006-12-20 20:40:29 +00:00

..

mac_framework.c

Expand commenting on label slots, justification for the MAC Framework locking

2006-12-20 20:38:44 +00:00

mac_framework.h

Fix LOR between the syncache and inpcb locks when MAC is present in the

2006-12-13 06:00:57 +00:00

mac_inet.c

Fix LOR between the syncache and inpcb locks when MAC is present in the

2006-12-13 06:00:57 +00:00

mac_internal.h

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

mac_label.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_net.c

Externalize local stack copy of the ifnet label, rather than the copy on

2006-12-20 20:40:29 +00:00

mac_pipe.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_policy.h

Fix LOR between the syncache and inpcb locks when MAC is present in the

2006-12-13 06:00:57 +00:00

mac_posix_sem.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

mac_priv.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

mac_process.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_socket.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_syscalls.c

Expand commenting on label slots, justification for the MAC Framework locking

2006-12-20 20:38:44 +00:00

mac_system.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

mac_sysv_msg.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_sysv_sem.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_sysv_shm.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

mac_vfs.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00