cvs commit: src/sys/security/mac_bsdextended mac_bsdextended.c

[Tom Rhodes]

trhodes     2004-08-21 20:15:09 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac_bsdextended mac_bsdextended.c 
  Log:
  Give the mac_bsdextended(4) policy the ability to match and apply on a first
  rule only in place of all rules match.  This is similar to how ipfw(8) works.
  
  Provide a sysctl, mac_bsdextended_firstmatch_enabled, to enable this
  feature.
  
  Reviewed by:    re (jhb)
  Aprroved by:    re (jhb)
  
  Revision  Changes    Path
  1.19      +21 -2     src/sys/security/mac_bsdextended/mac_bsdextended.c