Date: Sat, 9 Jul 2005 19:07:23 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 79860 for review Message-ID: <200507091907.j69J7N7X083994@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=79860 Change 79860 by rwatson@rwatson_zoo on 2005/07/09 19:07:09 Allow SEBSD audit, enforcement twiddle to be frobbed using boot-time tunables and kernel environment, not just sysctl. Affected files ... .. //depot/projects/trustedbsd/sebsd/sys/security/sebsd/sebsd_sysctl.c#9 edit Differences ... ==== //depot/projects/trustedbsd/sebsd/sys/security/sebsd/sebsd_sysctl.c#9 (text+ko) ==== @@ -352,5 +352,7 @@ "SEBSD access vector decision query"); SYSCTL_PROC(_security_mac_sebsd, OID_AUTO, auditing, CTLTYPE_INT | CTLFLAG_RW, NULL, 0, sysctl_sebsd_auditing, "I", "SEBSD avc auditing"); +TUNABLE_INT("security.mac.sebsd.auditing", &selinux_auditing); SYSCTL_PROC(_security_mac_sebsd, OID_AUTO, enforcing, CTLTYPE_INT | CTLFLAG_RW, NULL, 0, sysctl_sebsd_enforcing, "I", "SEBSD avc enforcement"); +TUNABLE_INT("security.mac.sebsd.enforcing", &selinux_enforcing);
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200507091907.j69J7N7X083994>