From owner-cvs-all  Tue Oct  1 19:42:40 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 490BD37B401; Tue,  1 Oct 2002 19:42:39 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 0BDE343E65; Tue,  1 Oct 2002 19:42:39 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from freefall.freebsd.org (rwatson@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id g922gcCo087497;
	Tue, 1 Oct 2002 19:42:38 -0700 (PDT)
	(envelope-from rwatson@freefall.freebsd.org)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.12.6/8.12.6/Submit) id g922gcnv087496;
	Tue, 1 Oct 2002 19:42:38 -0700 (PDT)
Message-Id: <200210020242.g922gcnv087496@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Tue, 1 Oct 2002 19:42:38 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern kern_mac.c subr_trap.c src/sys/sys mac.h
         mac_policy.h
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2002/10/01 19:42:38 PDT

  Modified files:
    sys/kern             kern_mac.c subr_trap.c 
    sys/sys              mac.h mac_policy.h 
  Log:
  Add a new MAC entry point, mac_thread_userret(td), which permits policy
  modules to perform MAC-related events when a thread returns to user
  space.  This is required for policies that have floating process labels,
  as it's not always possible to acquire the process lock at arbitrary
  points in the stack during system call processing; process labels might
  represent traditional authentication data, process history information,
  or other data.
  
  LOMAC will use this entry point to perform the process label update
  prior to the thread returning to userspace, when plugged into the MAC
  framework.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, Network Associates Laboratories
  
  Revision  Changes    Path
  1.27      +11 -0     src/sys/kern/kern_mac.c
  1.231     +6 -0      src/sys/kern/subr_trap.c
  1.9       +2 -0      src/sys/sys/mac.h
  1.10      +2 -0      src/sys/sys/mac_policy.h

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message