cvs commit: src/sys/kern kern_mac.c src/sys/security/mac mac_inet.c mac_internal.h mac_net.c mac_pipe.c mac_posix_sem.c mac_process.c mac_socket.c mac_system.c mac_sysv_msg.c mac_sysv_sem.c mac_sysv_shm.c mac_vfs.c

[Robert Watson]

rwatson     2006-12-21 09:51:34 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             kern_mac.c 
    sys/security/mac     mac_inet.c mac_internal.h mac_net.c 
                         mac_pipe.c mac_posix_sem.c mac_process.c 
                         mac_socket.c mac_system.c mac_sysv_msg.c 
                         mac_sysv_sem.c mac_sysv_shm.c mac_vfs.c 
  Log:
  Remove mac_enforce_subsystem debugging sysctls.  Enforcement on
  subsystems will be a property of policy modules, which may require
  access control check entry points to be invoked even when not actively
  enforcing (i.e., to track information flow without providing
  protection).
  
  Obtained from:  TrustedBSD Project
  Suggested by:   Christopher dot Vance at sparta dot com
  
  Revision  Changes    Path
  1.125     +1 -3      src/sys/kern/kern_mac.c
  1.7       +0 -3      src/sys/security/mac/mac_inet.c
  1.117     +0 -4      src/sys/security/mac/mac_internal.h
  1.123     +0 -15     src/sys/security/mac/mac_net.c
  1.109     +0 -23     src/sys/security/mac/mac_pipe.c
  1.6       +0 -23     src/sys/security/mac/mac_posix_sem.c
  1.116     +0 -57     src/sys/security/mac/mac_process.c
  1.8       +0 -42     src/sys/security/mac/mac_socket.c
  1.108     +0 -55     src/sys/security/mac/mac_system.c
  1.6       +0 -27     src/sys/security/mac/mac_sysv_msg.c
  1.5       +0 -14     src/sys/security/mac/mac_sysv_sem.c
  1.4       +0 -18     src/sys/security/mac/mac_sysv_shm.c
  1.116     +0 -110    src/sys/security/mac/mac_vfs.c