freebsd-skq/sys/security
Robert Watson 9b6dd12e5d Correct several issues in the integration of POSIX shared memory objects
and the new setmode and setowner fileops in FreeBSD 9.0:

- Add new MAC Framework entry point mac_posixshm_check_create() to allow
  MAC policies to authorise shared memory use.  Provide a stub policy and
  test policy templates.

- Add missing Biba and MLS implementations of mac_posixshm_check_setmode()
  and mac_posixshm_check_setowner().

- Add 'accmode' argument to mac_posixshm_check_open() -- unlike the
  mac_posixsem_check_open() entry point it was modeled on, the access mode
  is required as shared memory access can be read-only as well as writable;
  this isn't true of POSIX semaphores.

- Implement full range of POSIX shared memory entry points for Biba and MLS.

Sponsored by:   Google Inc.
Obtained from:	TrustedBSD Project
Approved by:    re (kib)
2011-09-02 17:40:39 +00:00
..
audit Fix a deficiency in the selinfo interface: 2011-08-25 15:51:54 +00:00
mac Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_biba Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_bsdextended
mac_ifoff
mac_lomac
mac_mls Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_none
mac_partition
mac_portacl Fix typos. 2010-11-09 10:59:09 +00:00
mac_seeotheruids sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly. 2011-01-12 19:54:14 +00:00
mac_stub Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_test Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00