FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=releng%2F6.4 2008-10-22T09:30:32Z 2008-10-22T09:30:32Z Bjoern A. Zeeb bz@FreeBSD.org 2008-10-22T09:30:32Z urn:sha1:41cadec500d30cd2706b4b8534be042ab73c51bc Use the label from the socket credential rather than the solabel which was not set by the mac_partition policy. Approved by: re (rwatson) 2005-09-26T14:36:54Z Poul-Henning Kamp phk@FreeBSD.org 2005-09-26T14:36:54Z urn:sha1:02eb92cc0eb8efadf6e5fc5ac65a45a8b92d15bc DEVFS fixes of many sorts. Approved by: re@ (scottl) 2004-02-22T00:33:12Z Robert Watson rwatson@FreeBSD.org 2004-02-22T00:33:12Z urn:sha1:f6a4109212fd8fbabc731f07b2dd5c7e07fbec33 to use the "year1-year3" format, as opposed to "year1, year2, year3". This seems to make lawyers more happy, but also prevents the lines from getting excessively long as the years start to add up. Suggested by: imp 2003-12-06T21:48:03Z Robert Watson rwatson@FreeBSD.org 2003-12-06T21:48:03Z urn:sha1:56d9e932072f81ebaa7bb1bf5995a46813bc91c4 and the mpo_create_cred() MAC policy entry point to mpo_copy_cred_label(). This is more consistent with similar entry points for creation and label copying, as mac_create_cred() was called from crdup() as opposed to during process creation. For a number of policies, this removes the requirement for special handling when copying credential labels, and improves consistency. Approved by: re (scottl) Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-11-12T03:14:31Z Robert Watson rwatson@FreeBSD.org 2003-11-12T03:14:31Z urn:sha1:eca8a663d442468f64e21ed869817b9048ab5a7b in various kernel objects to represent security data, we embed a (struct label *) pointer, which now references labels allocated using a UMA zone (mac_label.c). This allows the size and shape of struct label to be varied without changing the size and shape of these kernel objects, which become part of the frozen ABI with 5-STABLE. This opens the door for boot-time selection of the number of label slots, and hence changes to the bound on the number of simultaneous labeled policies at boot-time instead of compile-time. This also makes it easier to embed label references in new objects as required for locking/caching with fine-grained network stack locking, such as inpcb structures. This change also moves us further in the direction of hiding the structure of kernel objects from MAC policy modules, not to mention dramatically reducing the number of '&' symbols appearing in both the MAC Framework and MAC policy modules, and improving readability. While this results in minimal performance change with MAC enabled, it will observably shrink the size of a number of critical kernel data structures for the !MAC case, and should have a small (but measurable) performance benefit (i.e., struct vnode, struct socket) do to memory conservation and reduced cost of zeroing memory. NOTE: Users of MAC must recompile their kernel and all MAC modules as a result of this change. Because this is an API change, third party MAC modules will also need to be updated to make less use of the '&' symbol. Suggestions from: bmilekic Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-06-23T01:26:34Z Robert Watson rwatson@FreeBSD.org 2003-06-23T01:26:34Z urn:sha1:f51e58036ebe3a3e75527325e659d7ba02b129ed the MAC policy modules to improve robustness against C string bugs and vulnerabilities. Following these revisions, all string construction of labels for export to userspace (or elsewhere) is performed using the sbuf API, which prevents the consumer from having to perform laborious and intricate pointer and buffer checks. This substantially simplifies the externalization logic, both at the MAC Framework level, and in individual policies; this becomes especially useful when policies export more complex label data, such as with compartments in Biba and MLS. Bundled in here are some other minor fixes associated with externalization: including avoiding malloc while holding the process mutex in mac_lomac, and hence avoid a failure mode when printing labels during a downgrade operation due to the removal of the M_NOWAIT case. This has been running in the MAC development tree for about three weeks without problems. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-03-27T19:26:39Z Robert Watson rwatson@FreeBSD.org 2003-03-27T19:26:39Z urn:sha1:78183ac2d2669c86a73f9acc38050ce09295a1a7 the vendor is only included in the long name currently, reducing verbosity when modules are registered and unregistered. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2002-11-08T18:04:36Z Robert Watson rwatson@FreeBSD.org 2002-11-08T18:04:36Z urn:sha1:ef5def596d3e5479f096ed526f0fcc31e3dc519e entry points to include an explicit execlabel. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2002-11-04T01:53:12Z Robert Watson rwatson@FreeBSD.org 2002-11-04T01:53:12Z urn:sha1:dc858fcabedb57c5e9351fdd5a1d994e39b2a88e three from their BSD-style license. Also, s/NAI Labs/Network Associates Laboratories/. 2002-11-03T00:53:03Z Robert Watson rwatson@FreeBSD.org 2002-11-03T00:53:03Z urn:sha1:0d89ccd7d5479825fa1ec98eb34b446f188e6332 the partition once a partition has been set. This is required for correct operation of sendmail between partitions. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories