freebsd-skq/sys/security/mac
csjp be495bef58 Introduce a new MAC entry point for label initialization of the NFS daemon's
credential: mac_associate_nfsd_label()

This entry point can be utilized by various Mandatory Access Control policies
so they can properly initialize the label of files which get created
as a result of an NFS operation. This work will be useful for fixing kernel
panics associated with accessing un-initialized or invalid vnode labels.

The implementation of these entry points will come shortly.

Obtained from:	TrustedBSD
Requested by:	mdodd
MFC after:	3 weeks
2006-04-06 23:33:11 +00:00
..
mac_framework.c Don't call vn_finished_write() if vn_start_write() failed. 2006-03-19 20:43:07 +00:00
mac_framework.h Introduce a new MAC entry point for label initialization of the NFS daemon's 2006-04-06 23:33:11 +00:00
mac_inet.c
mac_internal.h Remove extern declaration of mac_enforce_sysv, as it's not present in 2004-10-22 11:07:18 +00:00
mac_label.c In the MAC label zone destructor, assert that the label is only 2004-10-22 11:08:52 +00:00
mac_net.c Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is 2005-07-05 23:39:51 +00:00
mac_pipe.c
mac_policy.h Introduce a new MAC entry point for label initialization of the NFS daemon's 2006-04-06 23:33:11 +00:00
mac_posix_sem.c Introduce MAC Framework and MAC Policy entry points to label and control 2005-05-04 10:39:15 +00:00
mac_process.c Eliminate a deadlock when creating snapshots. Blocking vn_start_write() must 2006-03-02 22:13:28 +00:00
mac_socket.c Add MAC Framework and MAC policy entry point mac_check_socket_create(), 2005-07-05 22:49:10 +00:00
mac_syscalls.c Don't call vn_finished_write() if vn_start_write() failed. 2006-03-19 20:43:07 +00:00
mac_system.c Correct grammar error in comment 2005-06-10 04:44:38 +00:00
mac_sysv_msg.c Remove an accidental clearing of the new label pointer on a system V 2005-02-24 16:08:41 +00:00
mac_sysv_sem.c Gratuitous renaming of four System V Semaphore MAC Framework entry 2005-06-07 05:03:28 +00:00
mac_sysv_shm.c Implement MAC entry points relating to System V IPC, calling into the 2004-11-17 13:14:24 +00:00
mac_vfs.c Introduce a new MAC entry point for label initialization of the NFS daemon's 2006-04-06 23:33:11 +00:00