Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Jul 2002 08:45:17 -0700 (PDT)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   cvs commit: src/sys/fs/devfs devfs_devs.c devfs_vfsops.c devfs_vnops.c
Message-ID:  <200207311545.g6VFjIQX086834@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
rwatson     2002/07/31 08:45:17 PDT

  Modified files:
    sys/fs/devfs         devfs_devs.c devfs_vfsops.c devfs_vnops.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Instrument devfs to support per-dirent MAC labels.  In particular,
  invoke MAC framework when devfs directory entries are instantiated
  due to make_dev() and related calls, and invoke the MAC framework
  when vnodes are instantiated from these directory entries.  Implement
  vop_setlabel() for devfs, which pushes the label update into the
  devfs directory entry for semi-persistant store.  This permits the MAC
  framework to assign labels to devices and directories as they are
  instantiated, and export access control information via devfs vnodes.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.21      +15 -0     src/sys/fs/devfs/devfs_devs.c
  1.22      +8 -0      src/sys/fs/devfs/devfs_vfsops.c
  1.42      +67 -0     src/sys/fs/devfs/devfs_vnops.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207311545.g6VFjIQX086834>