PERFORCE change 17579 for review

[Robert Watson]

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=17579

Change 17579 by rwatson at rwatson_tislabs on 2002/09/16 10:20:02

	Don't provide default labels at login in login.conf in preparation
	for merge of macnewapi to the main MAC tree.  Otherwise, if you
	don't have all policies loaded, you might get locked out.  Default
	labels for users must be configured by the administrator when
	they choose to load a policy.

Affected files ...

.. //depot/projects/trustedbsd/mac/etc/login.conf#14 edit

Differences ...

==== //depot/projects/trustedbsd/mac/etc/login.conf#14 (text+ko) ====

@@ -37,9 +37,9 @@
 	:vmemoryuse=unlimited:\
 	:priority=0:\
 	:ignoretime@:\
-	:umask=022:\
-	:label=biba/high(low-high),mls/low(low-high),te/default_d:\
-	:ttylabel=biba/high,mls/low,te/device_t:
+	:umask=022:
+	#:label=biba/high(low-high),mls/low(low-high),te/default_d:\
+	#:ttylabel=biba/high,mls/low,te/device_t:
 
 
 #
@@ -66,10 +66,10 @@
 # N.B.  login_getpwclass(3) will use this entry for the root account,
 #       in preference to 'default'.
 root:\
-	:label=biba/high(low-high),mls/low(low-high),te/default_d:\
-	:ttylabel=biba/high,mls/low,te/device_t:\
 	:ignorenologin:\
 	:tc=default:
+	#:label=biba/high(low-high),mls/low(low-high),te/default_d:\
+	#:ttylabel=biba/high,mls/low,te/device_t:\
 
 #
 # Russian Users Accounts. Setup proper environment variables.
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message