src-test2/sys/security, branch release/5.4.0_cvs

This commit was manufactured by cvs2svn to create tag

2005-05-07T17:51:10Z

'RELENG_5_4_0_RELEASE'. This commit was manufactured to restore the state of the 5.4-RELEASE image.

Merge mac_test.c:1.49-1.50 from HEAD to RELENG_5:

2005-02-13T13:57:46Z

date: 2004/10/22 11:24:50; author: rwatson; state: Exp; lines: +34 -28 Replace direct reference to kdb_enter() with a DEBUGGER() macro that will call printf() if KDB isn't compiled into the kernel. Obtained from: TrustedBSD Project Sponsored by: SPAWAR date: 2004/10/23 15:12:34; author: rwatson; state: Exp; lines: +1 -1 /%x/%s/ -- mismerged DEBUGGER() printf() format stirng from the TrustedBSD branch. Submitted by: bde

Minor white space synchronization between RELENG_5 and HEAD for mac_biba.c.

2005-02-13T12:10:38Z

Merge mac_bsdextended.c:1.22-1.23 and mac_bsdextended.h:1.4-1.5 from HEAD

2005-01-29T20:36:30Z

to RELENG_5: date: 2004/10/21 11:19:02; author: rwatson; state: Exp; lines: +59 -33 date: 2004/10/21 11:19:02; author: rwatson; state: Exp; lines: +15 -0 Modify mac_bsdextended policy so that it defines its own vnode access right bits rather than piggy-backing on the V* rights defined in vnode.h. The mac_bsdextended bits are given the same values as the V* bits to make the new kernel module binary compatible with the old version of libugidfw that uses V* bits. This avoids leaking kernel API/ABI to user management tools, and in particular should remove the need for libugidfw to include vnode.h. Requested by: phk date: 2004/10/21 11:29:56; author: rwatson; state: Exp; lines: +1 -1 date: 2004/10/21 11:29:56; author: rwatson; state: Exp; lines: +1 -1 Bump copyright dates for NETA on these files.

Merge mac_biba.c:1.83, mac_lomac.c:1.33, mac_mls.c:1.68, mac_stub.c:1.44,

2005-01-29T20:31:44Z

mac_test.c:1.52 from HEAD to RELENG_5: date: 2005/01/26 23:43:32; author: rwatson; state: Exp; lines: +0 -1 date: 2005/01/26 23:43:32; author: rwatson; state: Exp; lines: +1 -30 date: 2005/01/26 23:43:32; author: rwatson; state: Exp; lines: +0 -1 date: 2005/01/26 23:43:32; author: rwatson; state: Exp; lines: +0 -9 date: 2005/01/26 23:43:32; author: rwatson; state: Exp; lines: +1 -13 Remove policy references to mpo_check_vnode_mprotect(), which is currently unimplemented. Update copyrights. Pointed out by: csjp Update copyrights to reflect year, NETA->McAfee change.

Merge mac_label.c:1.3 from HEAD to RELENG_5:

2005-01-29T20:19:57Z

date: 2004/10/22 11:08:52; author: rwatson; state: Exp; lines: +3 -1 In the MAC label zone destructor, assert that the label is only destroyed in an initialized state.

Merge mac_internal.h:1.112 from HEAD to RELENG_5:

2005-01-29T20:18:32Z

date: 2004/10/22 11:07:18; author: rwatson; state: Exp; lines: +0 -1 Remove extern declaration of mac_enforce_sysv, as it's not present in the CVS version of the MAC Framework.

Merge mac_lomac.h:1.4 from HEAD to RELENG_5:

2005-01-26T11:21:51Z

date: 2005/01/23 14:26:09; author: rwatson; state: Exp; lines: +0 -1 Remove an obsoleted comment about struct versions. Pointed out by: trhodes

Merge mac_seeotheruids.c:1.7 from HEAD to RELENG_5:

2005-01-22T19:18:15Z

date: 2005/01/03 12:08:18; author: rwatson; state: Exp; lines: +3 -0 Exempt the superuser from mac_seeotheruids checks. Submitted by: bkoenig at cs dot tu-berlin dot de PR: 72238

Merge mac_portacl.c:1.7 from HEAD to RELENG_5:

2004-12-22T09:39:08Z

date: 2004/12/08 11:46:44; author: rwatson; state: Exp; lines: +23 -0 Add a new sysctl/tunable to mac_portacl: security.mac.portacl.autoport_exempt This sysctl exempts to bind port '0' as long as IP_PORTRANGELOW hasn't been set on the socket. This is quite useful as it allows applications to use automatic binding without adding overly broad rules for the binding of port 0. This sysctl defaults to enabled. This is a slight variation on the patch submitted by the contributor. MFC after: 2 weeks Submitted by: Michal Mertl