]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Remove mac_enforce_subsystem debugging sysctls. Enforcement on
authorRobert Watson <rwatson@FreeBSD.org>
Thu, 21 Dec 2006 09:51:34 +0000 (09:51 +0000)
committerRobert Watson <rwatson@FreeBSD.org>
Thu, 21 Dec 2006 09:51:34 +0000 (09:51 +0000)
commite66fe0e1db5b5e074e568fba22bd5b69b1430b6a
tree0e00125c1e53f64a611961efffaf3188df3fc0d6
parent94632b9fe1b71140751fb49369a8bfa000d0ecaa
Remove mac_enforce_subsystem debugging sysctls.  Enforcement on
subsystems will be a property of policy modules, which may require
access control check entry points to be invoked even when not actively
enforcing (i.e., to track information flow without providing
protection).

Obtained from: TrustedBSD Project
Suggested by: Christopher dot Vance at sparta dot com
15 files changed:
sys/kern/kern_mac.c
sys/security/mac/mac_framework.c
sys/security/mac/mac_inet.c
sys/security/mac/mac_internal.h
sys/security/mac/mac_net.c
sys/security/mac/mac_pipe.c
sys/security/mac/mac_posix_sem.c
sys/security/mac/mac_process.c
sys/security/mac/mac_socket.c
sys/security/mac/mac_syscalls.c
sys/security/mac/mac_system.c
sys/security/mac/mac_sysv_msg.c
sys/security/mac/mac_sysv_sem.c
sys/security/mac/mac_sysv_shm.c
sys/security/mac/mac_vfs.c