Date: Tue, 22 Oct 2002 10:17:09 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 19906 for review Message-ID: <200210221717.g9MHH9Xf017318@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=19906 Change 19906 by rwatson@rwatson_tislabs on 2002/10/22 10:17:08 By popular request, remove mac_te, the experimental type enforcement policy. SEBSD does a much better job of TE, and this experimental policy never really got off the ground (but did cause a lot of work to be done every time we modified the framework :-). Affected files ... .. //depot/projects/trustedbsd/mac/MACREADME#23 edit .. //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 edit .. //depot/projects/trustedbsd/mac/sys/conf/files#63 edit .. //depot/projects/trustedbsd/mac/sys/conf/options#37 edit .. //depot/projects/trustedbsd/mac/sys/modules/mac_te/Makefile#2 delete .. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.c#90 delete .. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.h#13 delete Differences ... ==== //depot/projects/trustedbsd/mac/MACREADME#23 (text+ko) ==== @@ -29,7 +29,6 @@ mac_none_load="NO" # Null MAC policy mac_partition_load="NO" # Partition MAC policy mac_seeotheruids_load="NO" # UID visbility MAC policy -mac_te_load="NO" # Type Enforcement policy (boot only) sebsd_load="NO" # Port of SELinux/FLASK (boot only) ==== //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 (text+ko) ==== @@ -768,7 +768,6 @@ options MAC_NONE options MAC_PARTITION options MAC_SEEOTHERUIDS -options MAC_TE options MAC_TEST ==== //depot/projects/trustedbsd/mac/sys/conf/files#63 (text+ko) ==== @@ -1502,7 +1502,6 @@ security/mac_none/mac_none.c optional mac_none security/mac_partition/mac_partition.c optional mac_partition security/mac_seeotheruids/mac_seeotheruids.c optional mac_seeotheruids -security/mac_te/mac_te.c optional mac_te security/mac_test/mac_test.c optional mac_test security/sebsd/sebsd.c optional sebsd security/sebsd/sebsd_syscall.c optional sebsd ==== //depot/projects/trustedbsd/mac/sys/conf/options#37 (text+ko) ==== @@ -154,7 +154,6 @@ MAC_NONE opt_dontuse.h MAC_PARTITION opt_dontuse.h MAC_SEEOTHERUIDS opt_dontuse.h -MAC_TE opt_dontuse.h MAC_TEST opt_dontuse.h SEBSD opt_dontuse.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210221717.g9MHH9Xf017318>