Robert Watson c14d15ae3e Remove MAC Framework access control check entry points made redundant with ... the introduction of priv(9) and MAC Framework entry points for privilege checking/granting. These entry points exactly aligned with privileges and provided no additional security context: - mac_check_sysarch_ioperm() - mac_check_kld_unload() - mac_check_settime() - mac_check_system_nfsd() Add mpo_priv_check() implementations to Biba and LOMAC policies, which, for each privilege, determine if they can be granted to processes considered unprivileged by those two policies. These mostly, but not entirely, align with the set of privileges granted in jails. Obtained from: TrustedBSD Project		2007-04-22 15:31:22 +00:00
..
nfs_serv.c	Initialize vfslocked to 0 before nfsm_srvmtofh() so that the variable is	2007-03-26 15:14:58 +00:00
nfs_srvcache.c	- Turn all explicit giant acquires into conditional VFS_LOCK_GIANTs.	2007-03-17 18:18:08 +00:00
nfs_srvsock.c	In nfsrv_rcv(), don't reacquire the nfs server lock until after	2007-04-15 15:50:50 +00:00
nfs_srvsubs.c	- Split out the part of SYSCALL_MODULE_HELPER() that builds a 'struct	2007-04-02 13:53:26 +00:00
nfs_syscalls.c	Remove MAC Framework access control check entry points made redundant with	2007-04-22 15:31:22 +00:00
nfs.h	- Turn all explicit giant acquires into conditional VFS_LOCK_GIANTs.	2007-03-17 18:18:08 +00:00
nfsm_subs.h	- Turn all explicit giant acquires into conditional VFS_LOCK_GIANTs.	2007-03-17 18:18:08 +00:00
nfsrvcache.h
nfsrvstats.h