cvs commit: src/sys/security/mac mac_system.c src/sys/kern kern_sysctl.c src/sys/sys mac.h mac_policy.h src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_stub mac_stub.c ...

[Pawel Jakub Dawidek]

pjd         2004/02/22 04:31:44 PST

  FreeBSD src repository

  Modified files:
    sys/security/mac     mac_system.c 
    sys/kern             kern_sysctl.c 
    sys/sys              mac.h mac_policy.h 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_lomac mac_lomac.c 
    sys/security/mac_stub mac_stub.c 
    sys/security/mac_test mac_test.c 
  Log:
  Reimplement sysctls handling by MAC framework.
  Now I believe it is done in the right way.
  
  Removed some XXMAC cases, we now assume 'high' integrity level for all
  sysctls, except those with CTLFLAG_ANYBODY flag set. No more magic.
  
  Reviewed by:    rwatson
  Approved by:    rwatson, scottl (mentor)
  Tested with:    LINT (compilation), mac_biba(4) (functionality)
  
  Revision  Changes    Path
  1.149     +15 -15    src/sys/kern/kern_sysctl.c
  1.103     +3 -4      src/sys/security/mac/mac_system.c
  1.76      +5 -11     src/sys/security/mac_biba/mac_biba.c
  1.29      +5 -11     src/sys/security/mac_lomac/mac_lomac.c
  1.40      +2 -2      src/sys/security/mac_stub/mac_stub.c
  1.43      +2 -2      src/sys/security/mac_test/mac_test.c
  1.56      +4 -3      src/sys/sys/mac.h
  1.50      +5 -3      src/sys/sys/mac_policy.h