src-test2/sys/modules/null, branch release/5.2.1_cvs FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F5.2.1_cvs 2004-02-23T15:32:56Z This commit was manufactured by cvs2svn to create tag 2004-02-23T15:32:56Z cvs2svn cvs2svn@FreeBSD.org 2004-02-23T15:32:56Z urn:sha1:84a7b99b4e02a260bf7ff9b540032f4cb7bc612a 'RELENG_5_2_1_RELEASE'. This commit was manufactured to restore the state of the 5.2.1-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs. Revert a NOOP change to Makefile that slipped into the last commit. 2003-11-18T00:52:30Z Robert Watson rwatson@FreeBSD.org 2003-11-18T00:52:30Z urn:sha1:2dd0f3209f5a097868464f843e5d32af1a6f88bf Pointed out by: tjr Introduce a MAC label reference in 'struct inpcb', which caches 2003-11-18T00:39:07Z Robert Watson rwatson@FreeBSD.org 2003-11-18T00:39:07Z urn:sha1:a557af222b70694470f63e2a0f1bf58c9dcc73fd the MAC label referenced from 'struct socket' in the IPv4 and IPv6-based protocols. This permits MAC labels to be checked during network delivery operations without dereferencing inp->inp_socket to get to so->so_label, which will eventually avoid our having to grab the socket lock during delivery at the network layer. This change introduces 'struct inpcb' as a labeled object to the MAC Framework, along with the normal circus of entry points: initialization, creation from socket, destruction, as well as a delivery access control check. For most policies, the inpcb label will simply be a cache of the socket label, so a new protocol switch method is introduced, pr_sosetlabel() to notify protocols that the socket layer label has been updated so that the cache can be updated while holding appropriate locks. Most protocols implement this using pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use the the worker function in_pcbsosetlabel(), which calls into the MAC Framework to perform a cache update. Biba, LOMAC, and MLS implement these entry points, as do the stub policy, and test policy. Reviewed by: sam, bms Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories This is not going to win prizes for the most useful module ever, 2003-02-27T18:08:44Z Mark Murray markm@FreeBSD.org 2003-02-27T18:08:44Z urn:sha1:c1f4590524dbcfa389c19951b64bc1fe8251da51 but it is useful to me for some testing and warns-fixing.