src-test2/sys/security/mac, branch release/7.3.0_cvs

Copy releng/7.3 to release/7.3.0 to mark 7.3-RELEASE.

2010-03-21T01:30:13Z

Approved by: re (implicit) This commit was manufactured to restore the state of the 7.3-RELEASE image.

Merge r189311 from head to stable/7:

2009-12-29T17:35:56Z

Reduce the verbosity of SDT trace points for DTrace by defining several wrapper macros that allow trace points and arguments to be declared using a single macro rather than several. This means a lot less repetition and vertical space for each trace point. Use these macros when defining privilege and MAC Framework trace points. Reviewed by: jb Requested by: bz

Merge r187666 from head to stable/7:

2009-12-29T17:31:52Z

Begin to add SDT tracing of the MAC Framework: add policy modevent, register, and unregister hooks that give access to the mac_policy_conf for the policy. Obtained from: TrustedBSD Project Requested by: bz

Merge r187667 from head to stable/7:

2009-02-07T00:05:10Z

Use __FBSDID() for $FreeBSD$ version strings in .c files. Obtained from: TrustedBSD Project

MFC: r183973

2008-10-31T09:41:06Z

Add mac_check_inpcb_visible MAC Framework entry point, which is similar to mac_check_socket_visible but operates on the inpcb. Approved by: re (rwatson)

Merge r178285, r178318, r178319, r178320, r178321, r178322, r178325,

2008-08-18T08:11:48Z

r178376, r178377, r178378, r178419, r179412, r179414, r180127, r180338, r180343, r180344, r180346, r180348, r180368, r180422, r180429, r180536, r180558, r180589, r181364, r181365 from head to stable/7: Introduce and use rwlocks throughout the inpcbinfo and inpcb infrastructure, and protocols that depend on that infrastructure, including UDP, TCP, and IP raw sockets. Significant parts of this work were reviewed by Bjoern Zeeb, and tested by Paul Saab, Kris Keneway, and George Neville-Neil, whose contributions to this work are greatly appreciated. Tested by: ps, kris, gnn, Mike Tancsa Reviewed by: bz, des

Merge r179781 from head to stable/7:

2008-08-04T08:50:16Z

The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the same as the global variable defined in ip_input.c. Instead, adopt the name 'q' as found in about 1/2 of uses in ip_input.c, preventing a collision on the name. This is non-harmful, but means that search and replace on the global works less well (as in the virtualization work), as well as indexing tools. Reported by: julian

MFC revision 1.19 with some tweaks to the entry point naming.

2008-06-04T16:13:12Z

Back out previous commit. These entry point names are not

2008-06-04T15:58:52Z

valid in this branch.

MFC cvs revision 1.19

2008-06-04T15:38:28Z

Plug a memory leak