freebsd-src/sys/security
Robert Watson 96adb90996 Begin another merge from the TrustedBSD MAC branch:
- Change mpo_init_foo(obj, label) and mpo_destroy_foo(obj, label) policy
  entry points to mpo_init_foo_label(label) and
  mpo_destroy_foo_label(label).  This will permit the use of the same
  entry points for holding temporary type-specific label during
  internalization and externalization, as well as for caching purposes.
- Because of this, break out mpo_{init,destroy}_socket() and
  mpo_{init,destroy}_mount() into seperate entry points for socket
  main/peer labels and mount main/fs labels.
- Since the prototype for label initialization is the same across almost
  all entry points, implement these entry points using common
  implementations for Biba, MLS, and Test, reducing the number of
  almost identical looking functions.

This simplifies policy implementation, as well as preparing us for the
merge of the new flexible userland API for managing labels on objects.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-05 15:10:00 +00:00
..
lomac - Use vrefcnt() instead of v_usecount. 2002-09-25 02:42:43 +00:00
mac Begin another merge from the TrustedBSD MAC branch: 2002-10-05 15:10:00 +00:00
mac_biba Begin another merge from the TrustedBSD MAC branch: 2002-10-05 15:10:00 +00:00
mac_bsdextended Pass active_cred and file_cred into the MAC framework explicitly 2002-08-19 19:04:53 +00:00
mac_ifoff Rename mac_check_socket_receive() to mac_check_socket_deliver() so that 2002-08-15 18:51:27 +00:00
mac_mls Begin another merge from the TrustedBSD MAC branch: 2002-10-05 15:10:00 +00:00
mac_none Begin another merge from the TrustedBSD MAC branch: 2002-10-05 15:10:00 +00:00
mac_seeotheruids Introduce support for Mandatory Access Control and extensible 2002-07-31 18:07:45 +00:00
mac_stub Begin another merge from the TrustedBSD MAC branch: 2002-10-05 15:10:00 +00:00
mac_test Begin another merge from the TrustedBSD MAC branch: 2002-10-05 15:10:00 +00:00