Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Jul 2002 10:17:51 -0700 (PDT)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   cvs commit: src/sys/netinet ip_input.c
Message-ID:  <200207311717.g6VHHp1k008718@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
rwatson     2002/07/31 10:17:51 PDT

  Modified files:
    sys/netinet          ip_input.c 
  Log:
  Introduce support for Mandatory Access Control and extensible
  kernel access control.
  
  Instrument the code managing IP fragment reassembly queues (struct ipq)
  to invoke appropriate MAC entry points to maintain a MAC label on
  each queue.  Permit MAC policies to associate information with a queue
  based on the mbuf that caused it to be created, update that information
  based on further mbufs accepted by the queue, influence the decision
  making process by which mbufs are accepted to the queue, and set the
  label of the mbuf holding the reassembled datagram following reassembly
  completetion.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.205     +17 -0     src/sys/netinet/ip_input.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207311717.g6VHHp1k008718>