1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-23 11:18:54 +00:00
freebsd/sys/security
Christian S.J. Peron 9eea3d85cc Standard Giant push down operations for the Mandatory Access Control (MAC)
framework. This makes Giant protection around MAC operations which inter-
act with VFS conditional, based on the MPSAFE status of the file system.

Affected the following syscalls:

o __mac_get_fd
o __mac_get_file
o __mac_get_link
o __mac_set_fd
o __mac_set_file
o __mac_set_link

-Drop Giant all together in __mac_set_proc because the
 mac_cred_mmapped_drop_perms_recurse routine no longer requires it.
-Move conditional Giant aquisitions to after label allocation routines.
-Move the conditional release of Giant to before label de-allocation
 routines.

Discussed with:	rwatson
2005-10-04 14:32:58 +00:00
..
mac Standard Giant push down operations for the Mandatory Access Control (MAC) 2005-10-04 14:32:58 +00:00
mac_biba Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_bsdextended If a "hole" opens up in the ruleset (i.e.: remove 5), do not return 2005-07-28 13:55:12 +00:00
mac_ifoff Update my personal copyrights and NETA copyrights in the kernel 2004-02-22 00:33:12 +00:00
mac_lomac Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_mls Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_none Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_partition Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_portacl Add a new sysctl/tunable to mac_portacl: 2004-12-08 11:46:44 +00:00
mac_seeotheruids Allow the root user to be aware of other credentials by virtue 2005-09-30 23:41:10 +00:00
mac_stub Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_test Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00