buildworld failure

[Anthony Schneider]

> 
> Right now, it's not possible to get anonymous P4 access; if there are
> continuing problems with the cvsup10 export of Perforce, please let me
> know.  I'm hoping to do another pass of merging of kernel changes from the
> MAC branch to the main 5.0-CURRENT tree sometime in the next week.  This
> will include some new entry points, and improvements in the Biba and MLS
> policies.
>

great.

> 
> We're hopeful to produce a first broad-distribution version of the SEBSD
> FLASK/TE module sometime in the month of April.  SEBSD relies on fairly
> extensive userland tweaks, however, which won't be merged into the main
> FreeBSD tree until we've reconciled differences in the label management
> approaches for the existing modules and SEBSD.  One of the challenges is
> that the existing TrustedBSD modules rely on explicit modification of
> labels using mac_set_proc(), whereas SEBSD tends to rely on transition of
> the label at exec-time using mac_execve().  We don't yet have an
> extensible user space model to handle generating those labels in a
> policy-agnostic manner.
> 

well, sounds very cool. do you have any ideas yet (that you care to share)
about a user space model?  also, if there's any way i can help (maybe with
userland?), please let me know.  I'd be happy to lend a hand.

-Anthony.

 
> Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
> robert at fledge.watson.org      Network Associates Laboratories
> 
> 
> To Unsubscribe: send mail to majordomo at trustedbsd.org
> with "unsubscribe trustedbsd-discuss" in the body of the message
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/trustedbsd-discuss/attachments/20030325/760d25d4/attachment.bin