Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Jul 2002 09:05:31 -0700 (PDT)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   cvs commit: src/sys/ufs/ufs ufs_vnops.c
Message-ID:  <200207311605.g6VG5VBg091272@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
rwatson     2002/07/31 09:05:30 PDT

  Modified files:
    sys/ufs/ufs          ufs_vnops.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Instrument UFS to support per-inode MAC labels.  In particular,
  invoke MAC framework entry points for generically supporting the
  backing of MAC labels into extended attributes.  This ends up
  introducing new vnode operation vector entries point at the MAC
  framework entry points, as well as some explicit entry point
  invocations for file and directory creation events so that the
  MAC framework can push labels to disk before the directory names
  become persistent (this will work better once EAs in UFS2 are
  hooked into soft updates).  The generic EA MAC entry points
  support executing with the file system in either single label
  or multilabel operation, and will fall back to the mount label
  if multilabel is not specified at mount-time.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.201     +31 -1     src/sys/ufs/ufs/ufs_vnops.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207311605.g6VG5VBg091272>