cvs commit: src/sys/conf files src/sys/kern uipc_sem.c src/sys/modules/sem Makefile src/sys/posix4 ksem.h src/sys/sys mac.h mac_policy.h src/sys/security/mac mac_posix_sem.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_mls ...

[Robert Watson]

rwatson     2005-05-04 10:39:15 UTC

  FreeBSD src repository

  Modified files:
    sys/conf             files 
    sys/kern             uipc_sem.c 
    sys/modules/sem      Makefile 
    sys/posix4           ksem.h 
    sys/sys              mac.h mac_policy.h 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_mls mac_mls.c 
    sys/security/mac_stub mac_stub.c 
    sys/security/mac_test mac_test.c 
  Added files:
    sys/security/mac     mac_posix_sem.c 
  Log:
  Introduce MAC Framework and MAC Policy entry points to label and control
  access to POSIX Semaphores:
  
  mac_init_posix_sem()            Initialize label for POSIX semaphore
  mac_create_posix_sem()          Create POSIX semaphore
  mac_destroy_posix_sem()         Destroy POSIX semaphore
  mac_check_posix_sem_destroy()   Check whether semaphore may be destroyed
  mac_check_posix_sem_getvalue()  Check whether semaphore may be queried
  mac_check_possix_sem_open()     Check whether semaphore may be opened
  mac_check_posix_sem_post()      Check whether semaphore may be posted to
  mac_check_posix_sem_unlink()    Check whether semaphore may be unlinked
  mac_check_posix_sem_wait()      Check whether may wait on semaphore
  
  Update Biba, MLS, Stub, and Test policies to implement these entry points.
  For information flow policies, most semaphore operations are effectively
  read/write.
  
  Submitted by:   Dandekar Hrishikesh <rishi_dandekar at sbcglobal dot net>
  Sponsored by:   DARPA, McAfee, SPARTA
  Obtained from:  TrustedBSD Project
  
  Revision  Changes    Path
  1.1020    +1 -0      src/sys/conf/files
  1.19      +56 -9     src/sys/kern/uipc_sem.c
  1.2       +1 -1      src/sys/modules/sem/Makefile
  1.2       +4 -0      src/sys/posix4/ksem.h
  1.1       +181 -0    src/sys/security/mac/mac_posix_sem.c (new)
  1.85      +59 -0     src/sys/security/mac_biba/mac_biba.c
  1.70      +59 -0     src/sys/security/mac_mls/mac_mls.c
  1.49      +66 -0     src/sys/security/mac_stub/mac_stub.c
  1.58      +61 -0     src/sys/security/mac_test/mac_test.c
  1.64      +15 -0     src/sys/sys/mac.h
  1.63      +21 -0     src/sys/sys/mac_policy.h