]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Add MAC_STATIC, a kernel option that disables internal MAC Framework
authorrwatson <rwatson@FreeBSD.org>
Mon, 3 May 2004 20:53:05 +0000 (20:53 +0000)
committerrwatson <rwatson@FreeBSD.org>
Mon, 3 May 2004 20:53:05 +0000 (20:53 +0000)
commita857ce2f0acec128ed2d0b02632546c552086fab
tree1820a195dcdd8fed2cde624bb60dd58362b713d7
parentc5cf8dba6f16f4dfbd87ae45597eca45c3a26c3f
Add MAC_STATIC, a kernel option that disables internal MAC Framework
synchronization protecting against dynamic load and unload of MAC
policies, and instead simply blocks load and unload.  In a static
configuration, this allows you to avoid the synchronization costs
associated with introducing dynamicism.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, McAfee Research
sys/conf/options
sys/kern/kern_mac.c
sys/security/mac/mac_framework.c
sys/security/mac/mac_syscalls.c