FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F5.3.0 2004-02-22T00:33:12Z 2004-02-22T00:33:12Z Robert Watson rwatson@FreeBSD.org 2004-02-22T00:33:12Z urn:sha1:f6a4109212fd8fbabc731f07b2dd5c7e07fbec33 to use the "year1-year3" format, as opposed to "year1, year2, year3". This seems to make lawyers more happy, but also prevents the lines from getting excessively long as the years start to add up. Suggested by: imp 2003-12-06T21:48:03Z Robert Watson rwatson@FreeBSD.org 2003-12-06T21:48:03Z urn:sha1:56d9e932072f81ebaa7bb1bf5995a46813bc91c4 and the mpo_create_cred() MAC policy entry point to mpo_copy_cred_label(). This is more consistent with similar entry points for creation and label copying, as mac_create_cred() was called from crdup() as opposed to during process creation. For a number of policies, this removes the requirement for special handling when copying credential labels, and improves consistency. Approved by: re (scottl) Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-11-12T03:14:31Z Robert Watson rwatson@FreeBSD.org 2003-11-12T03:14:31Z urn:sha1:eca8a663d442468f64e21ed869817b9048ab5a7b in various kernel objects to represent security data, we embed a (struct label *) pointer, which now references labels allocated using a UMA zone (mac_label.c). This allows the size and shape of struct label to be varied without changing the size and shape of these kernel objects, which become part of the frozen ABI with 5-STABLE. This opens the door for boot-time selection of the number of label slots, and hence changes to the bound on the number of simultaneous labeled policies at boot-time instead of compile-time. This also makes it easier to embed label references in new objects as required for locking/caching with fine-grained network stack locking, such as inpcb structures. This change also moves us further in the direction of hiding the structure of kernel objects from MAC policy modules, not to mention dramatically reducing the number of '&' symbols appearing in both the MAC Framework and MAC policy modules, and improving readability. While this results in minimal performance change with MAC enabled, it will observably shrink the size of a number of critical kernel data structures for the !MAC case, and should have a small (but measurable) performance benefit (i.e., struct vnode, struct socket) do to memory conservation and reduced cost of zeroing memory. NOTE: Users of MAC must recompile their kernel and all MAC modules as a result of this change. Because this is an API change, third party MAC modules will also need to be updated to make less use of the '&' symbol. Suggestions from: bmilekic Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-11-06T03:42:43Z Robert Watson rwatson@FreeBSD.org 2003-11-06T03:42:43Z urn:sha1:83b7b0edcab422d62d6f847c421006a2a41c4e91 passed into policies or used internally to the MAC Framework. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-10-25T15:28:20Z Robert Watson rwatson@FreeBSD.org 2003-10-25T15:28:20Z urn:sha1:da77b2fa6bf3355ab40ef6047a11108dc1770f77 type, rather than "object_label" as the first argument. This reduces complexity a little for the consumer, and also makes it easier for use to rename the underlying entry points in struct mac_policy_obj. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-10-22T20:02:04Z Robert Watson rwatson@FreeBSD.org 2003-10-22T20:02:04Z urn:sha1:5a9c1aaac539607c411d89f7557245abf777dc83 Enforce_process, enforce_vm access control enforcement twiddles. Credential, process label counters. VM revocation sysctls/tunables. Credential label management, internalization/externalization/relabel code. Process label management. Proc0, proc1 creation, cred creation. Thread userret. mac_execve_enter(), _exit(), transition at exec-time. VM revocation on process label change. Process-related access control checks (visibility, debug, signal, sched). Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-09-29T18:35:17Z Robert Watson rwatson@FreeBSD.org 2003-09-29T18:35:17Z urn:sha1:cc7b13bfe0dc4a881a42519ba6f8a959d0452d4e EINVAL rather than failing the following malloc due to the value being too large. 2003-08-26T17:29:02Z Robert Watson rwatson@FreeBSD.org 2003-08-26T17:29:02Z urn:sha1:a6a65b05d5eea33bf8de07f65eec1e28193f12a3 reference: this fixes mac_syscall() for static policies when using optimized locking. Obtained from: TrustedBSD Project Sponosred by: DARPA, Network Associates Laboratories 2003-08-21T18:21:22Z Robert Watson rwatson@FreeBSD.org 2003-08-21T18:21:22Z urn:sha1:eb8c7f999290d0cd203ab601aa1ebe613a7822ff mac_reflect_mbuf_icmp() mac_reflect_mbuf_tcp() These entry points permit MAC policies to do "update in place" changes to the labels on ICMP and TCP mbuf headers when an ICMP or TCP response is generated to a packet outside of the context of an existing socket. For example, in respond to a ping or a RST packet to a SYN on a closed port. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-08-21T13:53:01Z Robert Watson rwatson@FreeBSD.org 2003-08-21T13:53:01Z urn:sha1:c096756c00f4ec7b2e88bfaa5a0c8fc4941775b9 explicit access control checks to delete and list extended attributes on a vnode, rather than implicitly combining with the setextattr and getextattr checks. This reflects EA API changes in the kernel made recently, including the move to explicit VOP's for both of these operations. Obtained from: TrustedBSD PRoject Sponsored by: DARPA, Network Associates Laboratories