rwatson eb718f29b5 Expand scope of the MLS policy to include a new entry point available ... for enforcement: mac_mls_check_system_swapon() - Require that the subject and the swapfile target vnode labels dominate one another. An additional check is probably needed here to require that the swapfile target has a label of mls/high to prevent information leakage through swapfiles. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2003-03-25 01:16:10 +00:00
..
mac	Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE,	2003-03-23 02:09:20 +00:00
mac_biba	Expand scope of the Biba policy to include some of the new entry	2003-03-25 01:10:54 +00:00
mac_bsdextended	Expand scope of the BSD extended "file system firewall" policy to	2003-03-25 01:14:03 +00:00
mac_ifoff	License and wording updates: NAI has authorized the removal of clause	2002-11-04 01:53:12 +00:00
mac_lomac	Back out M_* changes, per decision of the TRB.	2003-02-19 05:47:46 +00:00
mac_mls	Expand scope of the MLS policy to include a new entry point available	2003-03-25 01:16:10 +00:00
mac_none	Default policies to on: if you load them or compile them into your	2002-12-10 16:20:34 +00:00
mac_partition	Update MAC modules for changes in arguments for exec MAC policy	2002-11-08 18:04:36 +00:00
mac_portacl	Including <sys/stdint.h> is (almost?) universally only to be able to use	2003-03-18 08:45:25 +00:00
mac_seeotheruids	Default policies to on: if you load them or compile them into your	2002-12-10 16:20:34 +00:00
mac_stub	Default policies to on: if you load them or compile them into your	2002-12-10 16:20:34 +00:00
mac_test	Default policies to on: if you load them or compile them into your	2002-12-10 16:20:34 +00:00