From owner-cvs-all  Tue Feb  4 13:28:49 2003
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5E6AA37B401; Tue,  4 Feb 2003 13:28:47 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 0FDDA43E4A; Tue,  4 Feb 2003 13:28:47 -0800 (PST)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h14LSkbv084828;
	Tue, 4 Feb 2003 13:28:46 -0800 (PST)
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h14LSk5a084827;
	Tue, 4 Feb 2003 13:28:46 -0800 (PST)
Message-Id: <200302042128.h14LSk5a084827@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Tue, 4 Feb 2003 13:28:46 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/security/mac_biba mac_biba.c src/sys/security/mac_mls
         mac_mls.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2003/02/04 13:28:46 PST

  Modified files:
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_mls mac_mls.c 
  Log:
  Place more stringent checks on process credential relabeling for the Biba
  and MLS policies: as we support both an effective (single) element and
  range (available) elements, require that the single be in the range if
  both the single and range are defined in the update.  Remove comments
  suggesting that such a check might be a good idea.
  
  Don't introduce a similar check for network interfaces; due to different
  interpretations of the single and range elements, it's not clear that
  it's useful to do so.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, Network Associates Laboratories
  
  Revision  Changes    Path
  1.52      +10 -6     src/sys/security/mac_biba/mac_biba.c
  1.40      +11 -6     src/sys/security/mac_mls/mac_mls.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message