cvs commit: src/sys/security/mac mac_policy.h mac_vfs.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_mls mac_mls.c src/sys/security/mac_stub mac_stub.c src/sys/security/mac_test ...

[Robert Watson]

rwatson     2007-04-22 16:18:10 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac     mac_policy.h mac_vfs.c 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_lomac mac_lomac.c 
    sys/security/mac_mls mac_mls.c 
    sys/security/mac_stub mac_stub.c 
    sys/security/mac_test mac_test.c 
    sys/sys              mount.h 
  Log:
  In the MAC Framework implementation, file systems have two per-mountpoint
  labels: the mount label (label of the mountpoint) and the fs label (label
  of the file system).  In practice, policies appear to only ever use one,
  and the distinction is not helpful.
  
  Combine mnt_mntlabel and mnt_fslabel into a single mnt_label, and
  eliminate extra machinery required to maintain the additional label.
  Update policies to reflect removal of extra entry points and label.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   SPARTA, Inc.
  
  Revision  Changes    Path
  1.89      +5 -9      src/sys/security/mac/mac_policy.h
  1.120     +11 -33    src/sys/security/mac/mac_vfs.c
  1.104     +8 -12     src/sys/security/mac_biba/mac_biba.c
  1.48      +8 -12     src/sys/security/mac_lomac/mac_lomac.c
  1.84      +8 -12     src/sys/security/mac_mls/mac_mls.c
  1.64      +5 -7      src/sys/security/mac_stub/mac_stub.c
  1.74      +9 -30     src/sys/security/mac_test/mac_test.c
  1.226     +1 -2      src/sys/sys/mount.h