freebsd-skq/sys/security
Robert Watson 130316479a Improve consistency with the Biba policy -- rename
mac_mls_subject_equal_ok() to mac_mls_subject_privileged(),
which more consistently reflects the fact that this is really
about our notion of privilege in the MLS policy.

Since we don't use suser() for privilege in MLS, remove
the suser check from the ifnet relabel ioctl, and replace it
with an MLS privilege check.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-07-31 20:00:06 +00:00
..
mac Redesign the externalization APIs from the MAC Framework to 2003-06-23 01:26:34 +00:00
mac_biba Remove a suser() check in the mac_biba policy: the MAC Framework itself 2003-07-31 18:35:43 +00:00
mac_bsdextended Remove trailing whitespace. 2003-07-05 01:24:36 +00:00
mac_ifoff Remove trailing whitespace. 2003-07-05 01:24:36 +00:00
mac_lomac Remove trailing whitespace. 2003-07-05 01:24:36 +00:00
mac_mls Improve consistency with the Biba policy -- rename 2003-07-31 20:00:06 +00:00
mac_none Redesign the externalization APIs from the MAC Framework to 2003-06-23 01:26:34 +00:00
mac_partition Redesign the externalization APIs from the MAC Framework to 2003-06-23 01:26:34 +00:00
mac_portacl Including <sys/stdint.h> is (almost?) universally only to be able to use 2003-03-18 08:45:25 +00:00
mac_seeotheruids Trim "trustedbsd_" from the front of the policy module "short names"; 2003-03-27 19:26:39 +00:00
mac_stub Redesign the externalization APIs from the MAC Framework to 2003-06-23 01:26:34 +00:00
mac_test Remove trailing whitespace. 2003-07-05 01:24:36 +00:00