PERFORCE change 20642 for review
Robert Watson
rwatson at freebsd.org
Mon Nov 4 12:46:17 GMT 2002
http://perforce.freebsd.org/chv.cgi?CH=20642
Change 20642 by rwatson at rwatson_tislabs on 2002/11/04 04:45:21
sysctl mac_cache_fslabel_in_vnode no longer required: the new
world order always caches labels in vnodes.
Affected files ...
.. //depot/projects/trustedbsd/mac/sys/kern/kern_mac.c#347 edit
Differences ...
==== //depot/projects/trustedbsd/mac/sys/kern/kern_mac.c#347 (text+ko) ====
@@ -157,12 +157,6 @@
&mac_enforce_vm, 0, "Enforce MAC policy on vm operations");
TUNABLE_INT("security.mac.enforce_vm", &mac_enforce_vm);
-static int mac_cache_fslabel_in_vnode = 1;
-SYSCTL_INT(_security_mac, OID_AUTO, cache_fslabel_in_vnode, CTLFLAG_RW,
- &mac_cache_fslabel_in_vnode, 0, "Cache mount fslabel in vnode");
-TUNABLE_INT("security.mac.cache_fslabel_in_vnode",
- &mac_cache_fslabel_in_vnode);
-
static int mac_mmap_revocation = 0;
SYSCTL_INT(_security_mac, OID_AUTO, mmap_revocation, CTLFLAG_RW,
&mac_mmap_revocation, 0, "Revoke mmap access to files on subject "
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list