PERFORCE change 32034 for review

[John Baldwin]

On 29-May-2003 Robert Watson wrote:
> http://perforce.freebsd.org/chv.cgi?CH=32034
> 
> Change 32034 by rwatson at rwatson_tislabs on 2003/05/29 12:56:54
> 
>       At some point, the mac_biba compartment subset logic seems
>       to have become inverted; return to logic wherein the Biba
>       dominate logic for a>=b uses:
>       
>               a.grade >= b.grade
>               a.compartment (superset) b.compartment
>       
>       This brings the _mac branch back into sync with the main
>       FreeBSD tree; I couldn't find a description for the reason
>       for this change, but if I missed it, please let me know.

Appears to have been in rev #189 of this file (new p4 client has annotate
support now):

Change 21367 by amigus at amigus_beetle on 2002/11/21 22:52:51

        Clean up parsing code (use strsep()) and introduce compartment
        range declaration and display.
        Biba/MLS now accepts and reports compartment sets using a '++'
        notation.  For example "mls/10:1++64" would denote level 10
        wih compartments 1 to 64.

Affected files ...

... //depot/projects/trustedbsd/mac/sys/security/mac_biba/mac_biba.c#189 edit
... //depot/projects/trustedbsd/mac/sys/security/mac_mls/mac_mls.c#150 edit

-- 

John Baldwin <jhb at FreeBSD.org>  <><  http://www.FreeBSD.org/~jhb/
"Power Users Use the Power to Serve!"  -  http://www.FreeBSD.org/