Robert Watson e183f80e54 Sync from MAC tree: break out the single mmap entry point into ... seperate entry points for each occasion: mac_check_vnode_mmap() Check at initial mapping mac_check_vnode_mprotect() Check at mapping protection change mac_check_vnode_mmap_downgrade() Determine if a mapping downgrade should take place following subject relabel. Implement mmap() and mprotect() entry points for labeled vnode policies. These entry points are currently not hooked up to the VM system in the base tree. These changes improve the consistency of the access control interface and offer more flexibility regarding limiting access to vnode mmaping. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2002-10-06 02:46:26 +00:00
..
mac_mls.c	Sync from MAC tree: break out the single mmap entry point into	2002-10-06 02:46:26 +00:00
mac_mls.h	Introduce support for Mandatory Access Control and extensible	2002-07-31 18:07:45 +00:00