PERFORCE change 52095 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=52095

Change 52095 by rwatson at rwatson_paprika on 2004/05/02 13:17:19

	Add some tasks.

Affected files ...

.. //depot/projects/trustedbsd/mac/TODO#2 edit

Differences ...

==== //depot/projects/trustedbsd/mac/TODO#2 (text+ko) ====

@@ -1,3 +1,27 @@
 
-Date Added	Task		Description
-----------	----		-----------
+Date 		Task			Description
+--------	----			-----------
+20040502	P_SUGID.optional	Currently, policies can cause the
+					setting of P_SUGID on processes when
+					they manipulate the credential.
+					However, this may be inappropriate
+					for policies that track information
+					flow control in an advisory form.
+					The MAC Framework should make the
+					decision to set P_SUGID explicit
+					rather than implicit.
+
+20040502	netinet6.support	Currently, TCP/IP with IPv4 is
+					fully supported; however, IPv6 is
+					not as a number of components do
+					not properly propagate labels across
+					mbuf alloc/copy operations, proper
+					checks may not occur in socket
+					delivery, etc.
+
+20040502	netatalk.support	Currently, netatalk is poorly
+					supported under MAC, as most I/O
+					operations are performed using
+					socket labels rather than DDP
+					PCBs as found in IPv4.
+