cvs commit: src/sys/security/mac_biba mac_biba.c

[Christian S.J. Peron]

csjp        2006-07-10 19:13:32 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac_biba mac_biba.c 
  Log:
  Implement mpo_associate_nfsd_label entry point for the BIBA security policy,
  we will initialize the label to biba/low for files that have been created
  through an NFS RPC. This is a safe default given the default nature of our
  NFS implementation, there is not a whole lot of data integrity there by
  default. This also fixes kernel panics associated with file creation over NFS
  while creating files on filesystems which have multilabel enabled with BIBA
  enabled.
  
  MFC after:      2 weeks
  Discussed with: rwatson
  
  Revision  Changes    Path
  1.92      +13 -0     src/sys/security/mac_biba/mac_biba.c