cvs commit: src/sys/conf files src/sys/netatalk aarp.c src/sys/netinet if_ether.c igmp.c src/sys/netinet6 nd6.c src/sys/security/mac mac_atalk.c mac_framework.h mac_inet.c mac_inet6.c mac_internal.h mac_net.c mac_policy.h ...

[Robert Watson]

rwatson     2007-10-28 15:55:23 UTC

  FreeBSD src repository

  Modified files:
    sys/conf             files 
    sys/netatalk         aarp.c 
    sys/netinet          if_ether.c igmp.c 
    sys/netinet6         nd6.c 
    sys/security/mac     mac_framework.h mac_inet.c mac_internal.h 
                         mac_net.c mac_policy.h 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_lomac mac_lomac.c 
    sys/security/mac_mls mac_mls.c 
    sys/security/mac_stub mac_stub.c 
    sys/security/mac_test mac_test.c 
  Added files:
    sys/security/mac     mac_atalk.c mac_inet6.c 
  Log:
  Move towards more explicit support for various network protocol stacks
  in the TrustedBSD MAC Framework:
  
  - Add mac_atalk.c and add explicit entry point mac_netatalk_aarp_send()
    for AARP packet labeling, rather than using a generic link layer
    entry point.
  
  - Add mac_inet6.c and add explicit entry point mac_netinet6_nd6_send()
    for ND6 packet labeling, rather than using a generic link layer entry
    point.
  
  - Add expliict entry point mac_netinet_arp_send() for ARP packet
    labeling, and mac_netinet_igmp_send() for IGMP packet labeling,
    rather than using a generic link layer entry point.
  
  - Remove previous genering link layer entry point,
    mac_mbuf_create_linklayer() as it is no longer used.
  
  - Add implementations of new entry points to various policies, largely
    by replicating the existing link layer entry point for them; remove
    old link layer entry point implementation.
  
  - Make MAC_IFNET_LOCK(), MAC_IFNET_UNLOCK(), and mac_ifnet_mtx global
    to the MAC Framework rather than static to mac_net.c as it is now
    needed outside of mac_net.c.
  
  Obtained from:  TrustedBSD Project
  
  Revision  Changes    Path
  1.1249    +2 -0      src/sys/conf/files
  1.44      +2 -2      src/sys/netatalk/aarp.c
  1.164     +1 -1      src/sys/netinet/if_ether.c
  1.56      +1 -1      src/sys/netinet/igmp.c
  1.86      +1 -1      src/sys/netinet6/nd6.c
  1.1       +66 -0     src/sys/security/mac/mac_atalk.c (new)
  1.93      +7 -2      src/sys/security/mac/mac_framework.h
  1.15      +25 -1     src/sys/security/mac/mac_inet.c
  1.1       +64 -0     src/sys/security/mac/mac_inet6.c (new)
  1.123     +4 -0      src/sys/security/mac/mac_internal.h
  1.129     +1 -15     src/sys/security/mac/mac_net.c
  1.103     +21 -5     src/sys/security/mac/mac_policy.h
  1.114     +48 -12    src/sys/security/mac_biba/mac_biba.c
  1.59      +49 -14    src/sys/security/mac_lomac/mac_lomac.c
  1.95      +49 -13    src/sys/security/mac_mls/mac_mls.c
  1.76      +32 -8     src/sys/security/mac_stub/mac_stub.c
  1.86      +48 -12    src/sys/security/mac_test/mac_test.c