PERFORCE change 32034 for review

John Baldwin jhb at
Thu May 29 20:13:02 GMT 2003

On 29-May-2003 Robert Watson wrote:
> Change 32034 by rwatson at rwatson_tislabs on 2003/05/29 12:56:54
>       At some point, the mac_biba compartment subset logic seems
>       to have become inverted; return to logic wherein the Biba
>       dominate logic for a>=b uses:
>               a.grade >= b.grade
>               a.compartment (superset) b.compartment
>       This brings the _mac branch back into sync with the main
>       FreeBSD tree; I couldn't find a description for the reason
>       for this change, but if I missed it, please let me know.

Appears to have been in rev #189 of this file (new p4 client has annotate
support now):

Change 21367 by amigus at amigus_beetle on 2002/11/21 22:52:51

        Clean up parsing code (use strsep()) and introduce compartment
        range declaration and display.
        Biba/MLS now accepts and reports compartment sets using a '++'
        notation.  For example "mls/10:1++64" would denote level 10
        wih compartments 1 to 64.

Affected files ...

... //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#189 edit
... //depot/projects/trustedbsd/mac/sys/security/mac_mls/mac_mls.c#150 edit


John Baldwin <jhb at>  <><
"Power Users Use the Power to Serve!"  -
To Unsubscribe: send mail to majordomo at
with "unsubscribe trustedbsd-cvs" in the body of the message

More information about the trustedbsd-cvs mailing list