Robert Watson f7b951a8e0 Support the new MAC user API in kernel: modify existing system calls ... to use a modified notion of 'struct mac', and flesh out the new variation system calls (almost identical to existing ones except that they permit a pid to be specified for process label retrieval, and don't follow symlinks). This generalizes the label API so that the framework is now almost entirely policy-agnostic. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2002-10-22 14:29:47 +00:00
..
lomac	Regularize the vop_stdlock'ing protocol across all the filesystems	2002-10-14 03:20:36 +00:00
mac	Support the new MAC user API in kernel: modify existing system calls	2002-10-22 14:29:47 +00:00
mac_biba	Introduce mac_biba_copy() and mac_mls_copy(), which conditionally	2002-10-21 20:55:39 +00:00
mac_bsdextended	Merge implementation of mpo_check_vnode_link() for various appropriate	2002-10-05 18:25:48 +00:00
mac_ifoff	Rename mac_check_socket_receive() to mac_check_socket_deliver() so that	2002-08-15 18:51:27 +00:00
mac_mls	Introduce mac_biba_copy() and mac_mls_copy(), which conditionally	2002-10-21 20:55:39 +00:00
mac_none	mac_none is a stub policy without any functional implementation.	2002-10-21 23:16:23 +00:00
mac_seeotheruids	Introduce support for Mandatory Access Control and extensible	2002-07-31 18:07:45 +00:00
mac_stub	mac_none is a stub policy without any functional implementation.	2002-10-21 23:16:23 +00:00
mac_test	Sync from MAC tree: break out the single mmap entry point into	2002-10-06 02:46:26 +00:00