src-test2/sys/security, branch release/6.3.0_cvs

This commit was manufactured by cvs2svn to create tag

2008-01-15T15:46:22Z

'RELENG_6_3_0_RELEASE'. This commit was manufactured to restore the state of the 6.3-RELEASE image.

Merge mac_posix_sem.c:1.1.2.1 from HEAD to RELENG_6_3:

2007-12-22T17:04:16Z

Fix a MAC label leak for POSIX semaphores, in which per-policy labels would be properly disposed of, but the global label structure for the semaphore wouldn't be freed. Reported by: tanyong , zhouzhouyi Approved by: re (kensmith)

Merge audit.c:1.32 from HEAD to RELENG_6:

2007-11-15T20:06:58Z

Spell statistics more correctly in comments.

Merge audit.c:1.31, audit_arg.c:1.14, audit_bsm.c:1.18 from HEAD to

2007-11-15T19:59:54Z

RELENG_6: Clean up, and sometimes remove, a number of audit-related implementation comments. Note that because of other unrelated changes in HEAD, some portions of audit.c:1.31 can't be merged verbatim (or at all).

Merge audit_bsm_token.c:1.13 from HEAD to RELENG_6:

2007-11-15T19:39:49Z

synchronize white space to congruent user-space code in OpenBSM.

Merge audit.c:1.35, audit_bsm_klib.c:1.8 from HEAD to RELENG_6:

2007-11-15T19:31:15Z

Replace use of AU_NULL with 0 when no audit classes are in use; this supports the removal of hard-coded audit class constants in OpenBSM 1.0. All audit classes are now dynamically configured via the audit_class database.

Merge audit_bsm_token.c:1.12 from HEAD to RELENG_6:

2007-11-15T19:30:37Z

Remove $P4$ that snuck into CVS from Perforce.

Merge audit_bsm_token.c:1.11 from HEAD to RELENG_6:

2007-11-15T19:29:39Z

Merge OpenBSM 1.0 alpha 14 changes to src/sys/security/audit: - au_to_attr64(), au_to_process64(), au_to_subject64(), au_to_subject64_ex(), au_to_zonename(), au_to_header64_tm(). - Extended address token fixes.

MFC the following revisions:

2007-11-10T17:08:41Z

1.14 +1 -0 src/sys/security/audit/audit.h 1.15 +22 -0 src/sys/security/audit/audit_arg.c 1.19 +35 -2 src/sys/security/audit/audit_bsm.c 1.14 +2 -2 src/sys/security/audit/audit_bsm_token.c 1.21 +7 -2 src/sys/security/audit/audit_syscalls.c (partial) - Add support for auditing arguments in setaudit_addr(2) - Fix bug which which would result in in_addr_ex tokens not being parsed properly - Calculate the size of an ip6 address correctly

MFC the following revisions:

2007-11-10T15:32:03Z

1.25 +1 -1 src/sys/security/audit/audit.c 1.10 +1 -1 src/sys/security/audit/audit.h 1.11 +2 -2 src/sys/security/audit/audit_arg.c 1.16 +34 -10 src/sys/security/audit/audit_bsm.c 1.10 +12 -12 src/sys/security/audit/audit_bsm_token.c 1.13 +2 -0 src/sys/security/audit/audit_private.h 1.13 +52 -7 src/sys/security/audit/audit_syscalls.c 1.475 +1 -1 src/sys/sys/proc.h This brings extended subject state support into RELENG_6 for audit records. This means that applications like sshd can take advantage of extended subject for IPv6. It should be noted that sshd has not been modified.