From owner-p4-projects  Mon Sep 16 10:20:35 2002
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 5B80437B407; Mon, 16 Sep 2002 10:20:32 -0700 (PDT)
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EAB9537B406
	for <perforce@freebsd.org>; Mon, 16 Sep 2002 10:20:31 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7EDA343E4A
	for <perforce@freebsd.org>; Mon, 16 Sep 2002 10:20:31 -0700 (PDT)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from freefall.freebsd.org (perforce@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g8GHKVJU090859
	for <perforce@freebsd.org>; Mon, 16 Sep 2002 10:20:31 -0700 (PDT)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g8GHKVl1090852
	for perforce@freebsd.org; Mon, 16 Sep 2002 10:20:31 -0700 (PDT)
Date: Mon, 16 Sep 2002 10:20:31 -0700 (PDT)
Message-Id: <200209161720.g8GHKVl1090852@freefall.freebsd.org>
X-Authentication-Warning: freefall.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
Subject: PERFORCE change 17579 for review
To: Perforce Change Reviews <perforce@freebsd.org>
Sender: owner-p4-projects@FreeBSD.ORG
Precedence: bulk
List-ID: <p4-projects.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20p4-projects>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20p4-projects>
X-Loop: FreeBSD.ORG

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=17579

Change 17579 by rwatson@rwatson_tislabs on 2002/09/16 10:20:02

	Don't provide default labels at login in login.conf in preparation
	for merge of macnewapi to the main MAC tree.  Otherwise, if you
	don't have all policies loaded, you might get locked out.  Default
	labels for users must be configured by the administrator when
	they choose to load a policy.

Affected files ...

.. //depot/projects/trustedbsd/mac/etc/login.conf#14 edit

Differences ...

==== //depot/projects/trustedbsd/mac/etc/login.conf#14 (text+ko) ====

@@ -37,9 +37,9 @@
 	:vmemoryuse=unlimited:\
 	:priority=0:\
 	:ignoretime@:\
-	:umask=022:\
-	:label=biba/high(low-high),mls/low(low-high),te/default_d:\
-	:ttylabel=biba/high,mls/low,te/device_t:
+	:umask=022:
+	#:label=biba/high(low-high),mls/low(low-high),te/default_d:\
+	#:ttylabel=biba/high,mls/low,te/device_t:
 
 
 #
@@ -66,10 +66,10 @@
 # N.B.  login_getpwclass(3) will use this entry for the root account,
 #       in preference to 'default'.
 root:\
-	:label=biba/high(low-high),mls/low(low-high),te/default_d:\
-	:ttylabel=biba/high,mls/low,te/device_t:\
 	:ignorenologin:\
 	:tc=default:
+	#:label=biba/high(low-high),mls/low(low-high),te/default_d:\
+	#:ttylabel=biba/high,mls/low,te/device_t:\
 
 #
 # Russian Users Accounts. Setup proper environment variables.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe p4-projects" in the body of the message