Robert Watson 2a1c79af92 Add compartment support to Biba and MLS policies. The logic of the ... policies remains the same: subjects and objects are labeled for integrity or sensitivity, and a dominance operator determines whether or not subject/object accesses are permitted to limit inappropriate information flow. Compartments are a non-hierarchal component to the label, so add a bitfield to the label element for each, and a set check as part of the dominance operator. This permits the implementation of "need to know" elements of MLS. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2002-10-21 18:42:01 +00:00
..
mac_framework.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_framework.h	Add compartment support to Biba and MLS policies. The logic of the	2002-10-21 18:42:01 +00:00
mac_internal.h	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_net.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_pipe.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_policy.h	Integrate mac_check_socket_send() and mac_check_socket_receive()	2002-10-06 14:39:15 +00:00
mac_process.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_syscalls.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_system.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00
mac_vfs.c	Use if_printf(ifp, "blah") instead of	2002-10-21 02:51:56 +00:00