cvs commit: src/sys/nfsserver nfs_srvsock.c src/sys/security/mac mac_vfs.c src/sys/sys mac.h mac_policy.h

[Christian S.J. Peron]

csjp        2006-04-06 23:33:11 UTC

  FreeBSD src repository

  Modified files:
    sys/nfsserver        nfs_srvsock.c 
    sys/security/mac     mac_vfs.c 
    sys/sys              mac.h mac_policy.h 
  Log:
  Introduce a new MAC entry point for label initialization of the NFS daemon's
  credential: mac_associate_nfsd_label()
  
  This entry point can be utilized by various Mandatory Access Control policies
  so they can properly initialize the label of files which get created
  as a result of an NFS operation. This work will be useful for fixing kernel
  panics associated with accessing un-initialized or invalid vnode labels.
  
  The implementation of these entry points will come shortly.
  
  Obtained from:  TrustedBSD
  Requested by:   mdodd
  MFC after:      3 weeks
  
  Revision  Changes    Path
  1.99      +3 -0      src/sys/nfsserver/nfs_srvsock.c
  1.111     +7 -0      src/sys/security/mac/mac_vfs.c
  1.70      +1 -0      src/sys/sys/mac.h
  1.71      +1 -0      src/sys/sys/mac_policy.h