cvs commit: src/sys/sys mac.h mac_policy.h src/sys/kern kern_mac.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_mls mac_mls.c src/sys/security/mac_none mac_none.c src/sys/security/mac_test ...

[Robert Watson]

rwatson     2003/03/26 07:12:03 PST

  FreeBSD src repository

  Modified files:
    sys/sys              mac.h mac_policy.h 
    sys/kern             kern_mac.c 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_lomac mac_lomac.c 
    sys/security/mac_mls mac_mls.c 
    sys/security/mac_none mac_none.c 
    sys/security/mac_test mac_test.c 
    sys/netinet          ip_input.c 
  Log:
  Modify the mac_init_ipq() MAC Framework entry point to accept an
  additional flags argument to indicate blocking disposition, and
  pass in M_NOWAIT from the IP reassembly code to indicate that
  blocking is not OK when labeling a new IP fragment reassembly
  queue.  This should eliminate some of the WITNESS warnings that
  have started popping up since fine-grained IP stack locking
  started going in; if memory allocation fails, the creation of
  the fragment queue will be aborted.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, Network Associates Laboratories
  
  Revision  Changes    Path
  1.82      +12 -4     src/sys/kern/kern_mac.c
  1.231     +4 -1      src/sys/netinet/ip_input.c
  1.56      +1 -1      src/sys/security/mac_biba/mac_biba.c
  1.11      +1 -1      src/sys/security/mac_lomac/mac_lomac.c
  1.43      +1 -1      src/sys/security/mac_mls/mac_mls.c
  1.27      +1 -1      src/sys/security/mac_none/mac_none.c
  1.24      +3 -2      src/sys/security/mac_test/mac_test.c
  1.38      +1 -1      src/sys/sys/mac.h
  1.37      +1 -1      src/sys/sys/mac_policy.h