PERFORCE change 19906 for review

Robert Watson rwatson at freebsd.org
Tue Oct 22 17:17:09 GMT 2002


http://perforce.freebsd.org/chv.cgi?CH=19906

Change 19906 by rwatson at rwatson_tislabs on 2002/10/22 10:17:08

	By popular request, remove mac_te, the experimental type
	enforcement policy.  SEBSD does a much better job of TE,
	and this experimental policy never really got off the ground
	(but did cause a lot of work to be done every time we
	modified the framework :-).

Affected files ...

.. //depot/projects/trustedbsd/mac/MACREADME#23 edit
.. //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 edit
.. //depot/projects/trustedbsd/mac/sys/conf/files#63 edit
.. //depot/projects/trustedbsd/mac/sys/conf/options#37 edit
.. //depot/projects/trustedbsd/mac/sys/modules/mac_te/Makefile#2 delete
.. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.c#90 delete
.. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.h#13 delete

Differences ...

==== //depot/projects/trustedbsd/mac/MACREADME#23 (text+ko) ====

@@ -29,7 +29,6 @@
 mac_none_load="NO"              # Null MAC policy
 mac_partition_load="NO"		# Partition MAC policy
 mac_seeotheruids_load="NO"      # UID visbility MAC policy
-mac_te_load="NO"                # Type Enforcement policy	(boot only)
 sebsd_load="NO"			# Port of SELinux/FLASK		(boot only)
 
 

==== //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 (text+ko) ====

@@ -768,7 +768,6 @@
 options 	MAC_NONE
 options 	MAC_PARTITION
 options 	MAC_SEEOTHERUIDS
-options 	MAC_TE
 options 	MAC_TEST
 
 

==== //depot/projects/trustedbsd/mac/sys/conf/files#63 (text+ko) ====

@@ -1502,7 +1502,6 @@
 security/mac_none/mac_none.c	optional mac_none
 security/mac_partition/mac_partition.c	optional mac_partition
 security/mac_seeotheruids/mac_seeotheruids.c	optional mac_seeotheruids
-security/mac_te/mac_te.c	optional mac_te
 security/mac_test/mac_test.c	optional mac_test
 security/sebsd/sebsd.c		optional sebsd
 security/sebsd/sebsd_syscall.c	optional sebsd

==== //depot/projects/trustedbsd/mac/sys/conf/options#37 (text+ko) ====

@@ -154,7 +154,6 @@
 MAC_NONE	opt_dontuse.h
 MAC_PARTITION	opt_dontuse.h
 MAC_SEEOTHERUIDS	opt_dontuse.h
-MAC_TE		opt_dontuse.h
 MAC_TEST	opt_dontuse.h
 SEBSD		opt_dontuse.h
 
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message



More information about the trustedbsd-cvs mailing list