Robert Watson 6742f32809 Introduce support for Mandatory Access Control and extensible ... kernel access control. Instrument devfs to support per-dirent MAC labels. In particular, invoke MAC framework when devfs directory entries are instantiated due to make_dev() and related calls, and invoke the MAC framework when vnodes are instantiated from these directory entries. Implement vop_setlabel() for devfs, which pushes the label update into the devfs directory entry for semi-persistant store. This permits the MAC framework to assign labels to devices and directories as they are instantiated, and export access control information via devfs vnodes. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs		2002-07-31 15:45:16 +00:00
..
devfs.h	Introduce support for Mandatory Access Control and extensible	2002-07-30 23:12:37 +00:00
devfs_devs.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 15:45:16 +00:00
devfs_rule.c	Unimplement panic(8) by making sure that we don't recurse into a	2002-07-28 03:52:44 +00:00
devfs_vfsops.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 15:45:16 +00:00
devfs_vnops.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 15:45:16 +00:00