]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Introduce support for Mandatory Access Control and extensible
authorrwatson <rwatson@FreeBSD.org>
Tue, 30 Jul 2002 23:03:29 +0000 (23:03 +0000)
committerrwatson <rwatson@FreeBSD.org>
Tue, 30 Jul 2002 23:03:29 +0000 (23:03 +0000)
commit86902a1ff292f4dfa3f1e7fefb962065c8942927
tree74cc590eda508517440f166c5b53bea6bea6ab7f
parentb1217b797417e5ef1569f06c9c09a54bd46bb9c0
Introduce support for Mandatory Access Control and extensible
kernel access control.

Label BPF descriptor objects, permitting security features to be
maintained on those objects.  bd_label will be used to authorize
data flow from network interfaces to user processes.  BPF
labels are protected using the same synchronization model as other
mutable data in the BPF descriptor.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
sys/net/bpfdesc.h