src/sys/security/mac_partition, branch stable/9

MFC: r227309 (partial)

2013-03-09T02:36:32Z

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. The SYSCTL_NODE macro defines a list that stores all child-elements of that node. If there's no SYSCTL_DECL macro anywhere else, there's no reason why it shouldn't be static.

Rather than having MAC policies explicitly declare what object types

2009-01-10T10:58:41Z

they label, derive that information implicitly from the set of label initializers in their policy operations set. This avoids a possible class of programmer errors, while retaining the structure that allows us to avoid allocating labels for objects that don't need them. As before, we regenerate a global mask of labeled objects each time a policy is loaded or unloaded, stored in mac_labeled. Discussed with: csjp Suggested by: Jacques Vidrine Obtained from: TrustedBSD Project Sponsored by: Apple, Inc.

Rename three MAC entry points from _proc_ to _cred_ to reflect the fact

2008-10-28T11:33:06Z

that they operate directly on credentials: mac_proc_create_swapper(), mac_proc_create_init(), and mac_proc_associate_nfsd(). Update policies. Obtained from: TrustedBSD Project

Extended comment on why we consider a partition relabel request of "0" to

2008-10-28T09:16:34Z

be a no-op request, and why this might have to change if we want to allow leaving a partition someday. Obtained from: TrustedBSD Project MFC after: 3 days

Rename label_on_label() to partition_check(), which is far more

2008-10-28T09:12:13Z

suggestive as to its actual function. Obtained from: TrustedBSD Project MFC after: 3 days

Add a mac_inpcb_check_visible implementation to all MAC policies

2008-10-17T15:11:12Z

that handle mac_socket_check_visible. Reviewed by: rwatson MFC after: 3 months (set timer; decide then)

Use the label from the socket credential rather than the

2008-10-17T08:58:33Z

solabel which was not set by the mac_partition policy. Spotted by: rwatson Reviewed by: rwatson MFC after: 3 days

Introduce two related changes to the TrustedBSD MAC Framework:

2008-08-23T15:26:36Z

(1) Abstract interpreter vnode labeling in execve(2) and mac_execve(2) so that the general exec code isn't aware of the details of allocating, copying, and freeing labels, rather, simply passes in a void pointer to start and stop functions that will be used by the framework. This change will be MFC'd. (2) Introduce a new flags field to the MAC_POLICY_SET(9) interface allowing policies to declare which types of objects require label allocation, initialization, and destruction, and define a set of flags covering various supported object types (MPC_OBJECT_PROC, MPC_OBJECT_VNODE, MPC_OBJECT_INPCB, ...). This change reduces the overhead of compiling the MAC Framework into the kernel if policies aren't loaded, or if policies require labels on only a small number or even no object types. Each time a policy is loaded or unloaded, we recalculate a mask of labeled object types across all policies present in the system. Eliminate MAC_ALWAYS_LABEL_MBUF option as it is no longer required. MFC after: 1 week ((1) only) Reviewed by: csjp Obtained from: TrustedBSD Project Sponsored by: Apple, Inc.

Rename mac_partition_enabled to partition_enabled to synchronize with

2008-08-02T20:53:59Z

other policies that similarly now avoid the additional mac_ prefix on variables. MFC after: soon

Resort TrustedBSD MAC Framework policy entry point implementations and

2007-10-29T13:33:06Z

declarations to match the object, operation sort order in the framework itself. Obtained from: TrustedBSD Project