1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-20 11:11:24 +00:00
freebsd/sys/security
Christian S.J. Peron c92163dcad Move MAC check_vnode_mmap entry point out from being exclusive to
MAP_SHARED so that the entry point gets executed un-conditionally.
This may be useful for security policies which want to perform access
control checks around run-time linking.

-add the mmap(2) flags argument to the check_vnode_mmap entry point
 so that we can make access control decisions based on the type of
 mapped object.
-update any dependent API around this parameter addition such as
 function prototype modifications, entry point parameter additions
 and the inclusion of sys/mman.h header file.
-Change the MLS, BIBA and LOMAC security policies so that subject
 domination routines are not executed unless the type of mapping is
 shared. This is done to maintain compatibility between the old
 vm_mmap_vnode(9) and these policies.

Reviewed by:	rwatson
MFC after:	1 month
2005-04-14 16:03:30 +00:00
..
mac Move MAC check_vnode_mmap entry point out from being exclusive to 2005-04-14 16:03:30 +00:00
mac_biba Move MAC check_vnode_mmap entry point out from being exclusive to 2005-04-14 16:03:30 +00:00
mac_bsdextended Minor white space synchronization and line wrapping. 2004-10-22 11:15:47 +00:00
mac_ifoff
mac_lomac Move MAC check_vnode_mmap entry point out from being exclusive to 2005-04-14 16:03:30 +00:00
mac_mls Move MAC check_vnode_mmap entry point out from being exclusive to 2005-04-14 16:03:30 +00:00
mac_none
mac_partition
mac_portacl Add a new sysctl/tunable to mac_portacl: 2004-12-08 11:46:44 +00:00
mac_seeotheruids Exempt the superuser from mac_seeotheruids checks. 2005-01-03 12:08:18 +00:00
mac_stub Move MAC check_vnode_mmap entry point out from being exclusive to 2005-04-14 16:03:30 +00:00
mac_test Move MAC check_vnode_mmap entry point out from being exclusive to 2005-04-14 16:03:30 +00:00