Support the new MAC user API in kernel: modify existing system calls

Browse source

to use a modified notion of 'struct mac', and flesh out the new variation
system calls (almost identical to existing ones except that they permit
a pid to be specified for process label retrieval, and don't follow
symlinks).  This generalizes the label API so that the framework is
now almost entirely policy-agnostic.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

...

This commit is contained in:

Robert Watson 2002-10-22 14:29:47 +00:00

parent 475b9d0a7c

commit f7b951a8e0

9 changed files with 8334 additions and 1602 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show stats Download patch file Download diff file Expand all files Collapse all files

1104

sys/kern/kern_mac.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_framework.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_internal.h

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_net.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_pipe.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_process.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_syscalls.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_system.c

View file

File diff suppressed because it is too large Load diff

1104

sys/security/mac/mac_vfs.c

View file

File diff suppressed because it is too large Load diff