src-test2/sys/security/mac_none, branch releng/5.0FreeBSD source treehttps://cgit-dev.freebsd.org/src-test2/atom?h=releng%2F5.02002-12-10T16:20:34ZDefault policies to on: if you load them or compile them into your2002-12-10T16:20:34ZRobert Watsonrwatson@FreeBSD.org2002-12-10T16:20:34Zurn:sha1:eba0370d9028d9b36bc36dea083f1ae6a0592e73
kernel, you should expect them to do something, so now they do. This
doesn't affect users who don't load or explicitly compile in the
policies.
Approved by: re (jhb)
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Remove dm_root entry from struct devfs_mount. It's never set, and is2002-12-09T03:44:28ZRobert Watsonrwatson@FreeBSD.org2002-12-09T03:44:28Zurn:sha1:990b4b2dc5b91303cf16dc49217fc819dfffa3b0
unused. Replace it with a dm_mount back-pointer to the struct mount
that the devfs_mount is associated with. Export that pointer to MAC
Framework entry points, where all current policies don't use the
pointer. This permits the SEBSD port of SELinux's FLASK/TE to compile
out-of-the-box on 5.0-CURRENT with full file system labeling support.
Approved by: re (murray)
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Garbage collect mac_create_devfs_vnode() -- it hasn't been used since2002-11-12T04:20:36ZRobert Watsonrwatson@FreeBSD.org2002-11-12T04:20:36Zurn:sha1:63b6f478ecc7e0a87ee8d9a7148ec0f2dab9dde6
we brought in the new cache and locking model for vnode labels. We
now rely on mac_associate_devfs_vnode().
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Update MAC modules for changes in arguments for exec MAC policy2002-11-08T18:04:36ZRobert Watsonrwatson@FreeBSD.org2002-11-08T18:04:36Zurn:sha1:ef5def596d3e5479f096ed526f0fcc31e3dc519e
entry points to include an explicit execlabel.
Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Update policy modules for changes in arguments associated with support2002-11-05T17:52:42ZRobert Watsonrwatson@FreeBSD.org2002-11-05T17:52:42Zurn:sha1:939b97cba63e59f0a189a9d7fdc9e00edb967feb
for label access on the interpreter, not just the shell script. No
policies currently present in the system rely on the new labels.
License and wording updates: NAI has authorized the removal of clause2002-11-04T01:53:12ZRobert Watsonrwatson@FreeBSD.org2002-11-04T01:53:12Zurn:sha1:dc858fcabedb57c5e9351fdd5a1d994e39b2a88e
three from their BSD-style license. Also, s/NAI Labs/Network Associates
Laboratories/.
Move to C99 sparse structure initialization for the mac_policy_ops2002-10-30T18:48:51ZRobert Watsonrwatson@FreeBSD.org2002-10-30T18:48:51Zurn:sha1:5c8dd342182009cc1c2f55e2551daee99d7d44a8
structure definition, rather than using an operation vector
we translate into the structure. Originally, we used a vector
for two reasons:
(1) We wanted to define the structure sparsely, which wasn't
supported by the C compiler for structures. For a policy
with five entry points, you don't want to have to stick in
a few hundred NULL function pointers.
(2) We thought it would improve ABI compatibility allowing modules
to work with kernels that had a superset of the entry points
defined in the module, even if the kernel had changed its
entry point set.
Both of these no longer apply:
(1) C99 gives us a way to sparsely define a static structure.
(2) The ABI problems existed anyway, due to enumeration numbers,
argument changes, and semantic mismatches. Since the going
rule for FreeBSD is that you really need your modules to
pretty closely match your kernel, it's not worth the
complexity.
This submit eliminates the operation vector, dynamic allocation
of the operation structure, copying of the vector to the
structure, and redoes the vectors in each policy to direct
structure definitions. One enourmous benefit of this change
is that we now get decent type checking on policy entry point
implementation arguments.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Various minor type, prototype tweaks -- clean up cruft due to lack of2002-10-30T18:10:46ZRobert Watsonrwatson@FreeBSD.org2002-10-30T18:10:46Zurn:sha1:1979061b56e339740866ec9899b8f043c7dd98d3
type checking on entry points (to be introduced shortly).
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
While 'mode_t' seemed like a good idea for the access mode argument for2002-10-30T17:56:57ZRobert Watsonrwatson@FreeBSD.org2002-10-30T17:56:57Zurn:sha1:b914de36c0be97b198fb7ae76c0013933a3c5c9c
MAC access() and open() checks, the argument actually has an int type
where it becomes available. Switch to using 'int' for the mode argument
throughout the MAC Framework and policy modules.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Hook up no-op stubs for reboot, swapon, sysctl entry points.2002-10-29T19:57:28ZRobert Watsonrwatson@FreeBSD.org2002-10-29T19:57:28Zurn:sha1:927f6069ac519e9302da3519f917c5e58693e015
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories