Robert Watson f0c2044bd9 In mac_get_fd(), remove unconditional acquisition of Giant around copying ...

of the socket label to thread-local storage, and replace it with
conditional acquisition based on debug.mpsafenet.  Acquire the socket
lock around the copy operation.

In mac_set_fd(), replace the unconditional acquisition of Giant with
the conditional acquisition of Giant based on debug.mpsafenet.  The socket
lock is acquired in mac_socket_label_set() so doesn't have to be
acquired here.

Obtained from:	TrustedBSD Project
Sponsored by:	SPAWAR, SPARTA

2005-04-16 18:33:13 +00:00

..

mac_framework.c

In mac_get_fd(), remove unconditional acquisition of Giant around copying

2005-04-16 18:33:13 +00:00

mac_framework.h

Introduce new MAC Framework and MAC Policy entry points to control the use

2005-04-16 13:29:15 +00:00

mac_inet.c

…

mac_internal.h

Remove extern declaration of mac_enforce_sysv, as it's not present in

2004-10-22 11:07:18 +00:00

mac_label.c

In the MAC label zone destructor, assert that the label is only

2004-10-22 11:08:52 +00:00

mac_net.c

…

mac_pipe.c

…

mac_policy.h

Introduce new MAC Framework and MAC Policy entry points to control the use

2005-04-16 13:29:15 +00:00

mac_process.c

Introduce new MAC Framework and MAC Policy entry points to control the use

2005-04-16 13:29:15 +00:00

mac_socket.c

…

mac_syscalls.c

In mac_get_fd(), remove unconditional acquisition of Giant around copying

2005-04-16 18:33:13 +00:00

mac_system.c

…

mac_sysv_msg.c

Remove an accidental clearing of the new label pointer on a system V

2005-02-24 16:08:41 +00:00

mac_sysv_sem.c

Implement MAC entry points relating to System V IPC, calling into the

2004-11-17 13:14:24 +00:00

mac_sysv_shm.c

Implement MAC entry points relating to System V IPC, calling into the

2004-11-17 13:14:24 +00:00

mac_vfs.c

Move MAC check_vnode_mmap entry point out from being exclusive to

2005-04-14 16:03:30 +00:00