src-test2/sys/security/mac/mac_socket.c, branch release/5.3.0 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F5.3.0 2004-06-13T02:50:07Z Socket MAC labels so_label and so_peerlabel are now protected by 2004-06-13T02:50:07Z Robert Watson rwatson@FreeBSD.org 2004-06-13T02:50:07Z urn:sha1:310e7ceb94990acce70c4a1230d0f397aaf93555 SOCK_LOCK(so): - Hold socket lock over calls to MAC entry points reading or manipulating socket labels. - Assert socket lock in MAC entry point implementations. - When externalizing the socket label, first make a thread-local copy while holding the socket lock, then release the socket lock to externalize to userspace. Move inet and inet6 related MAC Framework entry points from mac_net.c 2004-02-26T03:51:04Z Robert Watson rwatson@FreeBSD.org 2004-02-26T03:51:04Z urn:sha1:c66b4d8d26da47619216eacb047a2c2c22994d50 to a new mac_inet.c. This code is now conditionally compiled based on inet support being compiled into the kernel. Move socket related MAC Framework entry points from mac_net.c to a new mac_socket.c. To do this, some additional _enforce MIB variables are now non-static. In addition, mbuf_to_label() is now mac_mbuf_to_label() and non-static. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research