src-test2/sys/security, branch release/6.4.0_cvs

Copy releng/6.4 to release/6.4.0 in preparation for 6.4-RELEASE.

2008-11-26T01:09:48Z

Approved by: re (implicit) This commit was manufactured to restore the state of the 6.4-RELEASE image.

MFC: r183970

2008-10-22T09:30:32Z

Use the label from the socket credential rather than the solabel which was not set by the mac_partition policy. Approved by: re (rwatson)

Pass SUSER_ALLOWJAIL flag to suser_cred(9) in mac_seeotheruids: allow

2008-09-30T16:15:46Z

root in jail to see processes in the same jail with other uids. This was previously restricted as the default, but in practice it is fine to allow this as the caller implements jail scoping. Reported by: George Mamalakis Approved by: re (kensmith, kib)

MFC revision 1.25 -- Make sure we return EINVAL for invalid commands

2008-03-13T13:53:20Z

Merge mac_mls.c:1.99 from HEAD to RELENG_6:

2008-03-01T14:52:06Z

Properly return the error from mls_subject_privileged() in the ifnet relabel check for MLS rather than returning 0 directly. This problem didn't result in a vulnerability currently as the central implementation of ifnet relabeling also checks for UNIX privilege, and we currently don't guarantee containment for the root user in mac_mls, but we should be using the MLS definition of privilege as well as the UNIX definition in anticipation of supporting root containment at some point. Submitted by: Zhouyi Zhou Sponsored by: Google SoC 2007

MFC revision 1.24

2008-02-05T15:09:24Z

Whitespace fix

MFC revision 1.23

2008-02-05T15:03:36Z

Make sure we handle listen() and eliminate console messages for unknown event types.

Merge mac_posix_sem.c:1.12 from HEAD to RELENG_6:

2007-12-22T15:08:09Z

Fix a MAC label leak for POSIX semaphores, in which per-policy labels would be properly disposed of, but the global label structure for the semaphore wouldn't be freed. Reported by: tanyong , zhouzhouyi Approved by: re (kensmith)

Merge audit.c:1.32 from HEAD to RELENG_6:

2007-11-15T20:06:58Z

Spell statistics more correctly in comments.

Merge audit.c:1.31, audit_arg.c:1.14, audit_bsm.c:1.18 from HEAD to

2007-11-15T19:59:54Z

RELENG_6: Clean up, and sometimes remove, a number of audit-related implementation comments. Note that because of other unrelated changes in HEAD, some portions of audit.c:1.31 can't be merged verbatim (or at all).