Date: Tue, 6 Feb 2007 14:19:25 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/sys _label.h src/sys/security/mac mac_framework.h mac_internal.h mac_label.c mac_policy.h src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_mls mac_mls.c ... Message-ID: <200702061419.l16EJP6r074886@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2007-02-06 14:19:25 UTC
FreeBSD src repository
Modified files:
sys/security/mac mac_framework.h mac_internal.h
mac_label.c mac_policy.h
sys/security/mac_biba mac_biba.c
sys/security/mac_lomac mac_lomac.c
sys/security/mac_mls mac_mls.c
sys/security/mac_partition mac_partition.c
sys/security/mac_test mac_test.c
Removed files:
sys/sys _label.h
Log:
Introduce accessor functions mac_label_get() and mac_label_set() to replace
LABEL_TO_SLOT() macro used by policy modules to query and set label data
in struct label. Instead of using a union, store an intptr_t, simplifying
the API.
Update policies: in most cases this required only small tweaks to current
wrapper macros. In two cases, a single wrapper macros had to be split into
separate get and set macros.
Move struct label definition from _label.h to mac_internal.h and remove
_label.h. With this change, policies may now treat struct label * as
opaque, allowing us to change the layout of struct label without breaking
the policy module ABI. For example, we could make the maximum number of
policies with labels modifiable at boot-time rather than just at
compile-time.
Obtained from: TrustedBSD Project
Revision Changes Path
1.78 +1 -2 src/sys/security/mac/mac_framework.h
1.121 +18 -1 src/sys/security/mac/mac_internal.h
1.8 +24 -0 src/sys/security/mac/mac_label.c
1.86 +3 -7 src/sys/security/mac/mac_policy.h
1.99 +3 -3 src/sys/security/mac_biba/mac_biba.c
1.45 +4 -4 src/sys/security/mac_lomac/mac_lomac.c
1.82 +2 -2 src/sys/security/mac_mls/mac_mls.c
1.15 +11 -10 src/sys/security/mac_partition/mac_partition.c
1.67 +41 -40 src/sys/security/mac_test/mac_test.c
1.8 +0 -65 src/sys/sys/_label.h (dead)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200702061419.l16EJP6r074886>