src-test2/sys/security/mac/mac_framework.c, branch release/7.2.0_cvs

Copy releng/7.2 to release/7.2.0 for FreeBSD 7.2-RELEASE.

2009-05-01T02:51:58Z

Approved by: re (implicit) This commit was manufactured to restore the state of the 7.2-RELEASE image.

Remove conditional return of 1. For the MAC_STATIC case at this point in

2007-01-01T01:40:29Z

the code, one being returned is invariant. Discussed with: rwatson MFC after: 1 week

Only signal the CV indicating that the MAC Framework is available for

2006-12-31T20:26:20Z

exclusive access if there is at least one thread waiting for it to become available. This may significantly reduce overhead by reducing the number of unnecessary wakeups issued whenever the framework becomes idle. Annotate that we still signal the CV more than necessary and should fix this. Obtained from: TrustedBSD Project Reviewed by: csjp Tested by: csjp

Slightly resort functions in file so that no forward function prototypes

2006-12-29T20:21:21Z

are required. Obtained from: TrustedBSD Project

Re-add include of opt_mac.h in mac_framework.c, which was improperly

2006-12-29T20:16:29Z

removed from this file. It is required to pick up the definition of MAC_STATIC.

Centralize definition of MAC_VERSION in mac_policy.h, as it defines the

2006-12-28T21:48:38Z

kernel<->policy ABI version. Add a comment to the definition describing it and listing known versions. Modify MAC_POLICY_SET() to reference the current kernel version by name rather than by number. Staticize mac_late, which is used only in mac_framework.c. Obtained from: TrustedBSD Project

Move mac_init_label() and mac_destroy_label() from mac_framework.c to

2006-12-28T21:15:37Z

mac_label.c, and use these instead of replicated code in the label zone constructor and destructor. Obtained from: TrustedBSD Project

Trim unneeded includes.

2006-12-28T21:07:45Z

Break contents of kern_mac.c out into two files following a repo-copy:

2006-12-28T20:52:02Z

mac_framework.c Contains basic MAC Framework functions, policy registration, sysinits, etc. mac_syscalls.c Contains implementations of various MAC system calls, including ENOSYS stubs when compiling without options MAC. Obtained from: TrustedBSD Project

Update MAC Framework general comments, referencing various interfaces it

2006-12-28T17:25:57Z

consumes and implements, as well as the location of the framework and policy modules. Refactor MAC Framework versioning a bit so that the current ABI version can be exported via a read-only sysctl. Further update comments relating to locking/synchronization. Update copyright to take into account these and other recent changes. Obtained from: TrustedBSD Project